Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 278
Reset filtersCross-site Scripting in org.owasp.esapi:esapi
Path traversal in the OWASP Enterprise Security API
Hash collision attack vulnerability in Jenkins
SQL Injection in elide-datastore-aggregation
Path traversal vulnerability on Windows in Jenkins Continuous Integration with Toad Edge Plugin
Expression Language Injection in Netflix Conductor
Cross-site scripting in json-sanitizer
Security Advisory for "Log4Shell"
Insertion of Sensitive Information into Log File in Apache NiFi
Server-side request forgery (SSRF) in Apache Batik
Apache Log4j2 vulnerable to Improper Input Validation and Uncontrolled Recursion
Vulnerable dependency in XTDB connector
Unsafe Deserialization in jackson-databind
Serialization gadgets exploit in jackson-databind
Unsafe Deserialization in jackson-databind
Bash command injection in Apache Zeppelin
Cross-site Scripting in Apache Zeppelin
YAML deserialization can run untrusted code
Expression Language Injection in Apache Syncope
Improper Input Validation in Hibernate Validator
Cross-site scripting in Apache HttpClient
HTTP Request Smuggling in akka-http-core
Jetty vulnerable to incorrect handling of invalid large TLS frame, exhausting CPU resources
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.