Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
OrientDB Studio web management interface is vulnerable to clickjacking attacks
OrientDB Server Community Edition uses insufficiently random values to generate session IDs
OrientDB-Server vulnerable to Cross-Site Request Forgery
OrientDB vulnerable to Improper Privilage Management leading to arbitrary command injection
OWASP AntiSamy Cross-site Scripting vulnerability
OWASP AntiSamy vulnerable to Cross-site Scripting
Moderate severity vulnerability that affects org.apache.cxf.fediz:fediz-spring, org.apache.cxf.fediz:fediz-spring2, and org.apache.cxf.fediz:fediz-spring3
High severity vulnerability that affects org.apache.cxf.fediz:fediz-spring and org.apache.cxf.fediz:fediz-spring2
Apache CXF Fediz application plugins are vulnerable to Denial of Service (DoS) attacks
High severity vulnerability that affects org.apache.cxf.fediz:fediz-jetty8, org.apache.cxf.fediz:fediz-jetty9, org.apache.cxf.fediz:fediz-spring, org.apache.cxf.fediz:fediz-spring2, and org.apache.cxf.fediz:fediz-spring3
Moderate severity vulnerability that affects org.apache.cxf.fediz:fediz-jetty8, org.apache.cxf.fediz:fediz-jetty9, and org.apache.cxf.fediz:fediz-spring2
Keycloak vulnerable to uncontrolled resource consumption
Moderate severity vulnerability that affects org.keycloak:keycloak-core
Moderate severity vulnerability that affects org.keycloak:keycloak-core
keycloak-core discloses system properties
Keycloak vulnerable to infinite loop based Denial of Service
Improper Authentication in org.keycloak:keycloak-core
Moderate severity vulnerability that affects org.keycloak:keycloak-core
keycloak-core vulnerable to timing attacks against JWS token verification
Improper Limitation of a Pathname ('Path Traversal') in org.apache.solr:solr-core
All in One SEO <= 2.9.1.1 - Authenticated Stored Cross-Site Scripting
Spring Security and Spring Framework may not recognize certain paths that should be protected
Files or Directories Accessible to External Parties in org.springframework:spring-core
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.