Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 361
Reset filtersRemote Code Execution in Any23
XXE vulnerability in Jenkins Selenium HTML report Plugin
XXE vulnerability in Launch import
XXE vulnerability on Launch import with externally-defined DTD file
Billion laughs attack (XML bomb)
Command injection in Apache Flink
Remote Code Execution and download tracking in Mintegral SDK
Discovery uses the same AES/GCM Nonce throughout the session
Local Information Disclosure Vulnerability in Netty on Unix-Like systems
Vulnerability in RPKI manifest validation
Deserialization of Untrusted Data in Apache Olingo
Unescaped exception messages in error responses in Jetty
Moderate severity vulnerability that affects org.apache.karaf:apache-karaf and org.apache.karaf:karaf
XML External Entity Reference in mchange:c3p0
Improper Input Validation in async-http-client
Path traversal in org.springframework.integration:spring-integration-zip
Apache Tomcat Race Condition vulnerability
Moderate severity vulnerability that affects org.apache.tika:tika-core
Improper certificate validation in org.apache.httpcomponents:httpclient
Improper Verification of Cryptographic Signature in org.apache.httpcomponents:httpclient
Moderate severity vulnerability that affects org.springframework:spring-core
Spring Framework Cross Site Tracing (XST)
ZipSlip in org.apache.storm:storm-core
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.