Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,601
Reset filtersImproper Restriction of Rendered UI Layers or Frames in Keycloak
Remote Code Execution (RCE) vulnerability in dropwizard-validation
XSS in MITREid Connect
Micronaut's HTTP client is vulnerable to HTTP Request Header Injection
Local file inclusion vulnerability in http4s
Insufficient Nonce Validation in Eclipse Milo Client
HTTP Response Splitting in Styx
Remote Code Execution (RCE) vulnerability in dropwizard-validation
Server-Side Request Forgery (SSRF) in Apache Olingo
Improper Restriction of XML External Entity Reference in Apache Olingo
Improper input validation in Apache Olingo
Hard-Coded Key Used For Remember-me Token in Opencast
Unrestricted upload of file with dangerous type in Apache Solr
Request smuggling is possible when both chunked TE and content length specified
Default development error handler in Ratpack is vulnerable to HTML content injection (XSS)
Deserialization of Untrusted Data in Log4j
Deserialization of Untrusted Data in Log4j
Apache NiFi user log out issue
Unescaped exception messages in error responses in Jetty
Local file inclusion allows unauthorized access to internal resources in Alkacon OpenCms
Insufficiently Protected Credentials in Pivotal Reactor Netty
io.ratpack:ratpack-core vulnerable to Improper Neutralization of Special Elements in Output ('Injection')
Cross-site scripting in Swagger-UI
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.