Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filtersXWiki allows remote code execution from account through macro descriptions and XWiki.XWikiSyntaxMacrosList
XWiki allows RCE from script right in configurable sections
io.quarkus.http/quarkus-http-core: Quarkus HTTP Cookie Smuggling
Apache Struts file upload logic is flawed
sigstore-java has a vulnerability with bundle verification
AsyncHttpClient (AHC) library's `CookieStore` replaces explicitly defined `Cookie`s
Querydsl vulnerable to HQL injection through orderBy
sigstore-java has vulnerability with bundle verification
Searching Opencast may cause a denial of service
Apache Kafka Clients: Privilege escalation to filesystem read-access via automatic ConfigProvider
Graylog concurrent PDF report rendering can leak other users' reports
Apache Tomcat - Authentication Bypass
Undertow incorrectly parses cookies
FitNesse Path Traversal
Rebuilding a run with revoked script approval allowed by Jenkins Pipeline: Groovy Plugin
Restarting a run with revoked script approval allowed by Jenkins Pipeline: Declarative Plugin
Stored XSS vulnerability in Jenkins Authorize Project Plugin
Session fixation vulnerability in Jenkins OpenId Connect Authentication Plugin
Denial of Service attack on windows app using netty
powertac-server XML External Entity vulnerability
XXE vulnerability in XSLT parsing in `org.hl7.fhir.core`
XStream is vulnerable to a Denial of Service attack due to stack overflow from a manipulated binary input stream
Apache ZooKeeper: Authentication bypass with IP-based authentication in Admin Server
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.