Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersRack Gem Subject to Denial of Service via Hash Collisions
Apache Struts is vulnerable to Cross-site Scripting
Jenkins SonarQube Plugin Stores Passwords in Cleartext
Code injection via property expansion in SoapUI
Exposure of Sensitive Information to an Unauthorized Actor in JGroup
Improper Restriction of XML External Entity Reference in Apache Solr
Apache Geronimo JMX Remoting functionality allows remote code execution in 3.x before v3.0.1
Improper Neutralization of Special Elements used in a Command in FitNesse Wiki
Apache Struts2 Broken Access Control Vulnerability
Ignite Realtime Openfire vulnerable to XMPPbomb attack
Jenkins Subversion Plugin Stores Credentials with Base64 Encoding
Apache Solr UpdateRequestHandler for XML resolves XML External Entities
XML Injection in Apache Solr
Neo4J vulnerable to Cross-Site Request Forgery
Cross-Site Request Forgery in Jolokia
Improper Neutralization of Input During Web Page Generation in Direct Web Remoting
Improper Link Resolution Before File Access in Apache Hadoop
Improper Neutralization of Input During Web Page Generation in Apache Solr
JRuby denial of service via Hash Collision
Improper Control of Generation of Code in HawtJNI
Improper Limitation of a Pathname to a Restricted Directory in JBoss Undertow
XML External Entity Reference in RESTEasy
Improper Input Validation in Drools and jBPM
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.