Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,280
Reset filtersApache Solr Improper Input Validation and Path Traversal
Insertion of Sensitive Information into Log File in Apache NiFi Stateless
Insertion of Sensitive Information into Log File in Apache NiFi
Sandbox Bypass in Apache Velocity Engine
Cross-Site Request Forgery in com.softwaremill.akka-http-session:core_2.12
Remote code injection, Improper Input Validation and Uncontrolled Recursion in Log4j library
Malicious Atomix node queries expose sensitive information
Vulnerable dependency in XTDB connector
Improper Certificate Validation and Improper Validation of Certificate with Host Mismatch in Apache Sling Commons Messaging Mail
Remote code injection in Log4j
Files Accessible to External Parties in Opencast
Opencast publishes global system account credentials
HTTP Method Spoofing
Apache Log4j Remote Code Execution
Incomplete fix for Apache Log4j vulnerability
Remote code injection in Log4j
Code Injection in jackson-databind
HTTP request smuggling in netty
Path Traversal in com.linecorp.armeria:armeria
Apache JSPWiki Cross-site Scripting due to carefully crafted plugin link invocation
Incorrect Default Permissions in Apache JSPWiki
Improper certificate management in AWS IoT Device SDK v2
Improper certificate management in AWS IoT Device SDK v2
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.