Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,073
Reset filtersXML Injection in Crafter CMS Crafter Studio 3.0.1
Path Traversal in Crafter CMS Crafter Studio
Improper Control of Dynamically-Managed Code Resources in Crafter CMS Crafter Studio
Improper Control of Dynamically-Managed Code Resources in Crafter CMS Crafter Studio
Cross-Site Request Forgery
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
Uncontrolled Resource Consumption in Apache Tomcat
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
SQL injection in hibernate-core
Improper Access Control in infinispan-server-runtime
Data Amplification in Play Framework
Remote code execution in Apache Struts
Serialization vulnerability in Apache Tapestry
Remote code execution in DolphinScheduler
Remote code execution in Apache TomEE
Improper privilege handling in Apache Accumulo
TwitterServer Cross-site Scripting via /histograms endpoint
HTTP Response Splitting in WSO2 transport-http
Improper escaping in XWiki Platform
Class Loading Vulnerability in Artemis
Upload of file to arbitrary path in Apache Flink
Deserialization exploitation in Apache Dubbo
Improper synchronization in Apache Netbeans HTML/Java API
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.