Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,601
Reset filtersServer-Side Template Injection
Server-Side Forgery Request can be activated unmarshalling with XStream
Buffer not correctly recycled in Gzip Request inflation
Local Temp Directory Hijacking Vulnerability
Memory exhaustion in http4s-async-http-client with large or malicious compressed responses
RCE in XWiki
Man-in-the-middle attack in Apache Axis
Security Constraint Bypass in Spring Security
Users with SCRIPT right can execute arbitrary code in XWiki
Operation on a Resource after Expiration or Release in Jetty Server
Server side template injection in Apache Camel
SQL Injection in Kylin
SQL Injection in Kylin
Command Injection in Kylin
Privilege escalation in Presto
Denial of Service in Google Guava
Denial of Service in Netty
Denial of Service in Spring Framework
Apache Tomcat Denial of Service vulnerability
Insecure Deserialization in Apache XML-RPC
Directory traversal attack in Spring Cloud Config
Directory traversal attack in Spring Cloud Config
Potential remote code execution in Apache Tomcat
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.