Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersDeserialization of Untrusted Data in Apache Tomcat
Cross-site Scripting in Apache ActiveMQ
Apache ActiveMQ Cross-site scripting (XSS) vulnerability in the Portfolio publisher servlet
Apache ActiveMQ default configuration subject to denial of service
Improper Authentication in Apache ActiveMQ
Exposure of Sensitive Information to an Unauthorized Actor in Direct Web Remoting
Exposure of Sensitive Information to an Unauthorized Actor in Apache Hadoop
Apache Struts XSS Vulnerability
Denial of service in Apache Struts
Remote Code Execution in Apache Struts
Improper Certificate Validation in Shibboleth Identity Provider and OpenSAML
Improper Access Control in Apache Hadoop
Elasticsearch Improper Access Control vulnerability
Restlet Arbitrary Java Code Execution via a serialized object
Improper Control of Generation of Code ('Code Injection') in Spring Framework
Code injection in Apache Struts
Restlet is vulnerable to Arbitrary Java Code Execution via crafted XML
Ruby vulnerable to denial of service
Improper Input Validation in Apache ActiveMQ
Open redirect in Apache Struts
Path Traversal in Eclipse Mojarra
Shell command injection in Liferay Portal
Loop with Unreachable Exit Condition in Apache POI
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.