Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,280
Reset filtersCross-site Scripting by SVG upload in xwiki-platform
Cross-Site Request Forgery in xwiki-platform
Deserialization of Untrusted Data in Apache Dubbo
Apache CXF JMX Integration is vulnerable to a MITM attack
Gadget chain attack in Nippy
Injection in DeltaSpike
Cross-site scripting in Apache Atlas
Apache Geode SSL endpoint verification vulnerability
Request logging bypass in Jenkins Audit Trail Plugin
Authentication bypass in Apache Hadoop
Insufficiently Protected Credentials in Reactor Netty
Improper Validation of Specified Quantity in Input in Eclipse Hono
Injection and Improper Input Validation in Apache Unomi
DoS vulnerability in bundled XStream library in Jenkins Core
Cross site scripting in registration template in xwiki-platform
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
Improper privilege handling in Apache Accumulo
Class Loading Vulnerability in Artemis
Cross-site Scripting in Eclipse Hawkbit
SQL Injection in Spring Cloud Task
Remote code execution in Apache ActiveMQ
Missing authorization in xwiki-platform
Path traversal in xwiki-platform-skin-skinx
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.