Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,073
Reset filtersSpring Boot's RabbitMQ auto-configuration doesn't perform hostname verification when connecting to the RabbitMQ broker
Spring Boot DevTools remote secret comparison is vulnerable to timing attacks
Spring Boot's Elasticsearch auto-configuration doesn't perform hostname verification when connecting to the Elasticsearch server.
Apache Storm's Improper Handling of TLS Client Authentication Failure Leads to Anonymous Principal Assignment
Apache Storm Prometheus Reporter vulnerable to Improper Certificate Validation via Global SSL Context Downgrade
Apache Camel's Camel-Mail component is vulnerable to Camel message header injection
Apache MINA Vulnerable to Deserialization of Untrusted Data (CVE-2024-52046 Incomplete Fix)
Apache Camel Vulnerable to Authentication Bypass Using an Alternate Path or Channel
Apache Camel-Infinispan Component Vulnerable to Deserialization of Untrusted Data
Apache Camel-Consul component vulnerable to Deserialization of Untrusted Data
Apache camel-coap allows header injection that can lead to remote code execution
Apache Camel has an incomplete fix for CVE-2025-27636
Apache MINA vulnerable to Deserialization of Untrusted Data
Apache camel-jms, camel-sjms, camel-sjms2 and camel-amqp: Unsafe Deserialization of JMS ObjectMessage
Camel-MINA Vulnerable to Deserialization of Untrusted Data
Camel-PQC Vulnerable to Deserialization of Untrusted Data
Dynamic-Datasource has an Injection vulnerability
Zserio Runtime: Integer Overflow in BitStreamReader and Unbounded Memory Allocation in Deserialization
Apache ActiveMQ Vulnerable to Improper Input Validation and Code Injection
Apache ActiveMQ Vulnerable to Code Injection
Apache ActiveMQ Vulnerable to Cross-site Scripting
Apache DolphinScheduler RPC module has a Deserialization of Untrusted Data vulnerability
Apache DolphinScheduler has an Incorrect Authorization Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.