Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Jetty Directory Traversal Vulnerability
Alkacon OpenCms XSS via query parameter in a search action
Improper Input Validation in Apache Struts
Cross-site scripting in Apache Struts
Apache Struts vulnerable to Improper Input Validation
PEAR::Archive_Tar Directory Traversal vulnerability
PEAR::Auth potential authentication bypass vulnerability
Directory traversal vulnerability in the staticfilter component in CherryPy before 2.1.1 allows remote attackers to read arbitrary files via ".." sequences in unspecified vectors.
Apache log4net format string vulnerability causes DoS
Apache Geronimo console 1.0 vulnerable to cross-site scripting
TYPO3 Reveals Sensitive Information via Direct Request to `misc/phpcheck/`
Apache Derby exposes user and password attributes
Apache Tomcat allows remote attackers to read JSP source files
Apache Tomcat Discloses MS-DOS Pathname
Cross-site scripting (XSS) vulnerability in the HTML WikiProcessor in Edgewall Trac 0.9.2 allows remote attackers to inject arbitrary web script or HTML via javascript in the SRC attribute of an IMG t
Alkacon OpenCms XSS via username during login
Mortbay Jetty Discloses JSP Source Code
Apache Struts Cross-site scripting Vulnerability
phpMyAdmin CRLF Injection Vulnerability
Apache Tomcat Vulnerable to Denial of Service (DoS) via Simultaneous Requests
Apache Tomcat AJP Connector Information Leak
Tomcat Vulnerable to Web Cache Poisoning
Multiple components in Apache NiFi do not restrict XML External Entity references
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.