Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Improper Input Validation in Apache Unomi
Incorrect Authorization in Apache Solr
Regular Expression Denial of Service in djvalidator
OS Command Injection in systeminformation
Cross-site scripting in Crafter CMS Crafter Studio
Path Traversal in Crafter CMS Crafter Studio
XML Injection in Crafter CMS Crafter Studio 3.0.1
Path Traversal in Crafter CMS Crafter Studio
Improper Control of Dynamically-Managed Code Resources in Crafter CMS Crafter Studio
Improper Control of Dynamically-Managed Code Resources in Crafter CMS Crafter Studio
Cross-Site Request Forgery
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
Uncontrolled Resource Consumption in Apache Tomcat
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
SQL injection in hibernate-core
Improper Access Control in infinispan-server-runtime
Data Amplification in Play Framework
Remote code execution in Apache Struts
Serialization vulnerability in Apache Tapestry
push-dir Enables OS Command Injection
TOCTOU Race Condition in Yarn
Prototype Pollution in mout
ua-parser-js Regular Expression Denial of Service vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.