Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,071
Reset filtersRace condition in org.apache.hbase:hbase-thrift
High severity vulnerability that affects org.apache.hbase:hbase
Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15
In Bouncy Castle JCE Provider the DHIES implementation allowed the use of ECB mode
jackson-dataformat-xml vulnerable to server side request forgery (SSRF)
jackson-dataformat-xml vulnerable to XML external entity (XXE)
jackson-databind vulnerable to remote code execution due to incorrect deserialization and blocklist bypass
jackson-databind vulnerable to deserialization flaw leading to unauthenticated remote code execution
OrientDB Studio web management interface is vulnerable to clickjacking attacks
OrientDB Server Community Edition uses insufficiently random values to generate session IDs
OrientDB-Server vulnerable to Cross-Site Request Forgery
OrientDB vulnerable to Improper Privilage Management leading to arbitrary command injection
OWASP AntiSamy Cross-site Scripting vulnerability
OWASP AntiSamy vulnerable to Cross-site Scripting
Moderate severity vulnerability that affects org.apache.cxf.fediz:fediz-spring, org.apache.cxf.fediz:fediz-spring2, and org.apache.cxf.fediz:fediz-spring3
High severity vulnerability that affects org.apache.cxf.fediz:fediz-spring and org.apache.cxf.fediz:fediz-spring2
Apache CXF Fediz application plugins are vulnerable to Denial of Service (DoS) attacks
High severity vulnerability that affects org.apache.cxf.fediz:fediz-jetty8, org.apache.cxf.fediz:fediz-jetty9, org.apache.cxf.fediz:fediz-spring, org.apache.cxf.fediz:fediz-spring2, and org.apache.cxf.fediz:fediz-spring3
Moderate severity vulnerability that affects org.apache.cxf.fediz:fediz-jetty8, org.apache.cxf.fediz:fediz-jetty9, and org.apache.cxf.fediz:fediz-spring2
Keycloak vulnerable to uncontrolled resource consumption
Moderate severity vulnerability that affects org.keycloak:keycloak-core
Moderate severity vulnerability that affects org.keycloak:keycloak-core
keycloak-core discloses system properties
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.