Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,072
Reset filtersServer-Side Request Forgery in Hawt Hawtio
Improper Restriction of XML External Entity Reference in DiffPlug Spotless
Deserialization of Untrusted Data in FasterXML jackson-databind
Improper Certificate Validation and Insufficient Verification of Data Authenticity in Keycloak
Insufficiently Protected Credentials and Improper Authentication in Spring Security
Improper Locking in Apache Tomcat
Argument Injection in Apache Geode server
XML Entity Expansion in Pippo
Open Redirect in Spring Security OAuth
Credential exposure through log files in Undertow
Cross-site Scripting in HAPI FHIR
Cross-site Scriptin in JSPWiki
Cross-site Scripting in JSPWiki
Cross-Site Scripting in JSPWiki
Improper Neutralization of Wildcards or Matching Symbols
Privilege escalation vulnerability in Apache Hadoop
Cross-site scripting in Apache Tomcat
Access control bypass in Apache ZooKeeper
XML External Entity injection in Apache Camel
Path Traversal in DKPro Core
Command Injection in Xstream
Information exposure in FasterXML jackson-databind
Path Traversal in Spring Cloud Config
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.