Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,072
Reset filtersDeserialization of untrusted data in jackson-databind
Denial of Service in Apache POI
Incorrect Default Permissions in Apache DolphinScheduler
Path Traversal in Apache Flink
Directory Traversal in spring-boot-actuator-logview
Server-Side Template Injection
Server-Side Forgery Request can be activated unmarshalling with XStream
XStream vulnerable to an Arbitrary File Deletion on the local host when unmarshalling
MPXJ path Traversal vulnerability
Information Disclosure in Apache Groovy
Disabled Hostname Verification in Opencast
Buffer not correctly recycled in Gzip Request inflation
Template injection in cron-utils
XStream can be used for Remote Code Execution
Security issues in AWS KMS and AWS Encryption SDKs: in-band protocol negotiation and robustness
Vulnerability in RPKI manifest validation
Remote Code Execution in Apache Synapse
Local Temp Directory Hijacking Vulnerability
Ciphertext Malleability Issue in Tink Java
Memory exhaustion in http4s-async-http-client with large or malicious compressed responses
RCE in XWiki
TemporaryFolder on unix-like systems does not limit access to created files
Man-in-the-middle attack in Apache Axis
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.