Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,602
Reset filtersServer-Side Request Forgery in Karaf
Improper Certificate Validation in Graylog
Apache CXF JMX Integration is vulnerable to a MITM attack
Improper Handling of Exceptional Conditions and Improper Input Validation in Reactor Netty
Incorrect Authorization in Apache Solr
Uncontrolled Resource Consumption in Apache Tomcat
Improper Access Control in infinispan-server-runtime
Improper privilege handling in Apache Accumulo
TwitterServer Cross-site Scripting via /histograms endpoint
Improper Authentication in Apache ActiveMQ
Remote code execution in Apache ActiveMQ
Credentials bypass in Apache Druid
Cross-site Scripting in keycloak
Allocation of Resources Without Limits or Throttling in Keycloak
Improper Certificate Validation and Improper Validation of Certificate with Host Mismatch in Keycloak
Server-side request forgery (SSRF) in Apache Batik
Server-side request forgery (SSRF) in Apache XmlGraphics Commons
Insufficient Session Expiration in Apache NiFi Registry
Path Traversal in Apache James Server
Neo4j Graph Database vulnerable to Path Traversal
Insecure Java Deserialization in Apache Karaf
Path traversal in Apache James
Security Advisory for "Log4Shell"
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.