Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Securimage HTML Injection
Codiad remote code execution vulnerability
Apache Knox allows impersonation of users
Improper Neutralization of Input During Web Page Generation in Apache Sling
Luracast Restler directory traversal vulnerability
Improper Certificate Validation in Apache Commons HttpClient
Pivotal Cloud Foundry UAA XSS on UAA OpenID Connect check session iframe endpoint
Cloud Foundry UAA Denial of Service through client token revocation endpoint
Subrion CMS RCE Vulnerability
springframework-social Cross-Site Request Forgery vulnerability
Improper Limitation of a Pathname to a Restricted Directory in JCraft JSch
Improper Input Validation in Apache CXF
Improper Authentication in Apache CXF
XML Signature/Encryption Not Validated in Apache CXF
Improper Authentication in Apache CXF
Inadequate Encryption Strength in Apache CXF
Remote web-service operation execution in Apache CXF
Improper Authentication in Apache CXF
Covert Timing Channel in Apache CXF
Missing XML Validation in Apache CXF
Improper Authentication in Apache WSS4J
Loop with Unreachable Exit Condition in Apache CXF
Improper Input Validation in Apache CXF
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.