Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filtersApache ActiveMQ is Vulnerable to Integer Overflow or Wraparound
PMD Designer has Stored XSS in VBHTMLRenderer and YAHTMLRenderer via unescaped violation messages
jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition
Junrar has an arbitrary file write due to backslash Path Traversal bypass in LocalFolderExtractor on Linux/Unix
Snowflake JDBC Driver is Vulnerable to Uncontrolled Resource Consumption through SdkProxyRoutePlanner
PSI Probe: Broken access control can lead to DoS
PSI Probe vulnerable to Server-Side Request Forgery
c3p0 vulnerable to Remote Code Execution via unsafe deserialization of userOverridesAsString property
mchange-commons-java: Remote Code Execution via JNDI Reference Resolution
Apache Camel: KeycloakSecurityPolicy does not validate issuer of JWT tokens against configured realm
Keycloak: Missing Check on Disabled Client for Docker Registry Protocol
Jenkins has a build information disclosure vulnerability through Run Parameter
Jenkins has a stored XSS vulnerability in node offline cause description
Apache Tomcat - Security constraint bypass with HTTP/0.9
Wildfly Elytron integration susceptible to brute force attacks via CLI
XWiki vulnerable to click-jacking through CSS injection in comments
Leaky JWTs in OpenMetadata exposing highly-privileged bot users
Apache Shiro Affected by an Observable Timing Discrepancy Vulnerability
Keycloak logs sensitive headers
Apache Druid Vulnerable to Authentication Bypass
Keycloak Affected by Broken Access Control Vulnerability in the UserManagedPermissionService
Keycloak fails to verify if an Identity Provider (IdP) is enabled before issuing tokens
Keycloak affected by improper invitation token validation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.