Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filtersPebble has Arbitrary Local File Inclusion (LFI) Vulnerability via `include` macro
WSO2 incorrect authorization vulnerability
Solon Path Traversal
XWiki Platform allows remote code execution as guest via SolrSearchMacros request
Apache Ignite: Possible RCE when deserializing incoming messages by the server node
Instaclustr Cassandra-Lucene-Index allows bypass of Cassandra RBAC
GeoNetwork search end-point information disclosure in response headers
Apache NiFi: Potential Insertion of Sensitive Parameter Values in Debug Log
Denial of Service attack on windows app using Netty
SQL injection in JeecgBoot
Apache James vulnerable to denial of service through JMAP HTML to text conversion
Netplex Json-smart Uncontrolled Recursion vulnerability
Keycloak on Quarkus CLI option for encrypted JGroups ignored
GeoTools Remote Code Execution (RCE) vulnerability in evaluating XPath expressions
WildFly improper RBAC permission
PMD Designer's release key passphrase (GPG) available on Maven Central in cleartext
General OpenMRS Security Advisory, January 2025: Penetration Testing Results and Patches
Deep Java Library path traversal issue
Snowflake JDBC uses insecure temporary credential cache file permissions
Snowflake JDBC allows an untrusted search path on Windows
Infinispan vulnerable to Insertion of Sensitive Information into Log File
Apache Hive vulnerable to Observable Timing Discrepancy and Authentication Bypass by Spoofing
Apache Cocoon vulnerable to Incorrect Usage of Seeds in Pseudo-Random Number Generator
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.