Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 361
Reset filtersPowSyBl Core Contains a Polynomial ReDoS in RegexCriterion
PowSyBl Core contains Polynomial REDoS’es
pgjdbc Client Allows Fallback to Insecure Authentication Despite channelBinding=require Configuration
OpenMetadata SQL Injection
H2O Vulnerable to Denial of Service (DoS) and File Write
Deep Java Library path traversal issue
http4k has a potential XXE (XML External Entity Injection) vulnerability
Searching Opencast may cause a denial of service
OpenRefine leaks Google API credentials in releases
OpenRefine's error page lacks escaping, leading to potential Cross-site Scripting on import of malicious project
Improper Authentication vulnerability in Apache Solr
Eclipse Jetty URI parsing of invalid authority
Eclipse Jetty has a denial of service vulnerability on DosFilter
DataEase's H2 datasource has a remote command execution risk
OpenDaylight Model-Driven Service Abstraction Layer (MD-SAL) allows follower controller to set up flow entries
Path traversal in Reposilite javadoc file expansion (arbitrary file creation/overwrite) (`GHSL-2024-073`)
DNSJava DNSSEC Bypass
BoringSSLAEADContext in Netty Repeats Nonces
Quarkus: authorization flaw in quarkus resteasy reactive and classic
JADX file override vulnerability
Apache Commons Configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator()
Apache Pulsar: Pulsar Functions Worker's Archive Extraction Vulnerability Allows Unauthorized File Modification
angular vulnerable to super-linear runtime due to backtracking
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.