Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,072
Reset filtersLocal file inclusion vulnerability in http4s
Insufficient Nonce Validation in Eclipse Milo Client
Deserialization of Untrusted Data in jackson-databind
Deserialization of Untrusted Data in jackson-databind
HTTP Response Splitting in Styx
Potential HTTP request smuggling in Apache Tomcat
Potential HTTP request smuggling in Apache Tomcat
Remote Code Execution (RCE) vulnerability in dropwizard-validation
HTTP Request Smuggling in Netty
HTTP Request Smuggling in Netty
HTTP Request Smuggling in Netty
URL Redirection to Untrusted Site (Open Redirect) in Ktor
Improper Input Validation in Apache Solr
Improper Restriction of XML External Entity Reference in jackson-mapper-asl
Server-Side Request Forgery (SSRF) in Apache Olingo
Deserialization of Untrusted Data in Apache Olingo
Improper Restriction of XML External Entity Reference in Apache Olingo
Improper input validation in Apache Olingo
Improper input validation in Apache Shiro
XML external entity (XXE) processing ('external-parameter-entities' feature was not fully disabled))
Unauthenticated Access Via OAI-PMH
Password Hashing: Do not use MD5
Unsafe Identifiers in Opencast
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.