Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filtersApache Struts Remote Java Code Execution
Jenkins allows Cross-Site Scripting (XSS)
Jenkins allows Cross-Site Scripting (XSS)
Denial of Service in Apache Tomcat
Prototype Pollution in dset
Path Traversal in com.alibaba.oneagent:one-java-agent-plugin
GeoServer allows SSRF via the option for setting a proxy host
Improper input validation in Mort Bay Jetty
Apache Tomcat affected by vulnerability in TLS and SSL protocol
Improper Authentication in Apache Tomcat
Apache Tiles Vulnerable to XSS via EL Expression Injection
Spring Framework Inefficient Regular Expression Complexity
Apache Jackrabbit contains Cross-site Scripting
Apache Tomcat information disclosure vulnerability
Apache Tomcat Sensitive Information Disclosure
Improper Authentication in Mortbay Jetty
Apache Tomcat Path Traversal Vulnerability
JULI logging component in Apache Tomcat does not restrict certain permissions for web applications
Apache Tomcat SendMailServlet XSS
Apache Tomcat XSS Vulnerabilities in Examples Web Application
Apache Axis allows Exposure of Sensitive Information to an Unauthorized Actor
Apache Tomcat XSS In Accept-Language Headers
Apache Tomcat Directory Traversal
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.