Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Remote code execution in DolphinScheduler
Remote code execution in Apache TomEE
Path Traversal in Yarn
Signatures are mistakenly recognized to be valid in jsrsasign
Improper privilege handling in Apache Accumulo
TwitterServer Cross-site Scripting via /histograms endpoint
HTTP Response Splitting in WSO2 transport-http
Prototype Pollution in undefsafe
Prototype Pollution in dot-object
Improper escaping in XWiki Platform
Class Loading Vulnerability in Artemis
Upload of file to arbitrary path in Apache Flink
Resource exhaustion in engine.io
Deserialization exploitation in Apache Dubbo
Improper synchronization in Apache Netbeans HTML/Java API
Improper Certificate Validation in node-sass
Prototype Pollution leading to Remote Code Execution in superjson
Cross-site Scripting in Eclipse Hawkbit
Arbitrary code execution in Apache ServiceComb java-chassis
SQL injection without credentials in ming-soft MCMS
Improper Privilege Management in Apache Hadoop
SQL Injection in Spring Cloud Task
Improper Authentication in Apache ActiveMQ
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.