Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersApache Linkis Authentication Bypass vulnerability
HtmlUnit Code Injection vulnerability
Jenkins AbsInt a³ Plugin XML External Entity Reference vulnerability
Apache Zeppelin Improper Input Validation vulnerability
Apache Kylin vulnerable to remote code execution
Apache Any23 vulnerable to excessive memory usage
Bouncy Castle For Java LDAP injection vulnerability
quarkus-core vulnerable to client driven TLS cipher downgrading
Remote Code Execution for 2.4.1 and earlier
Upgrading doesn't prevent exploiting vulnerable XWiki documents
XWiki Platform vulnerable to Code injection through NotificationRSSService
XWiki Platform vulnerable to Code Injection in icon themes
org.xwiki.commons:xwiki-commons-xml's HTML sanitizer allows form elements in restricted
XWiki Platform vulnerable to persistent Cross-site Scripting through CKEditor Configuration pages
Keycloak vulnerable to Improper Client Certificate Validation for OAuth/OpenID clients
Keycloak vulnerable to cross-site scripting when validating URI-schemes on SAML and OIDC
Keycloak Untrusted Certificate Validation vulnerability
Client Spoofing within the Keycloak Device Authorisation Grant
PlantUML Server-Side Request Forgery vulnerability
PlantUML Improper Access Control vulnerability
jFinal Server-Side Template Injection vulnerability
Apache StreamPipes Improper Privilege Management vulnerability
Vaadin vulnerable to possible information disclosure in non visible components.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.