Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,072
Reset filtersServer Side Request Forgery in Apache Axis
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Ratpack
Improper Input Validation in Apache Sanselan
Infinite Loop in Apache Sanselan
Cross-site Scripting in Apache UIMA
Cross-site scripting in Apache Archiva
Improper Input Validation in Apache Archiva
Path Traversal in Apache Camel
Exposure of Sensitive Information to an Unauthorized Actor in Keycloak
Cross-site Scripting in Apache Zeppelin
Session Fixation in Apache Zeppelin
Improper Authentication in Apache Zeppelin
Information Exposure vulnerability in Eclipse Jetty
Installation information leak in Eclipse Jetty
Cross-site Scripting in Eclipse Jetty
Billion laughs attack in c3p0
Missing Encryption of Sensitive Data in arrow-kt Arrow
Server-Side Request Forgery (SSRF) in com.ctrip.framework.apollo:apollo
Apache Tomcat OS Command Injection vulnerability
XSS in jQuery as used in Drupal, Backdrop CMS, and other products
Spring Security uses insufficiently random values
Cleartext Transmission of Sensitive Information, Inclusion of Functionality from Untrusted Control Sphere , and Download of Code Without Integrity Check in Eclipse hawkBit
Improper Limitation of a Pathname ('Path Traversal') in org.apache.jspwiki:jspwiki-war
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.