Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filtersImproper Privilege Management in Apache Sling
Apollo has potential access control security issue in eureka
apollo-portal has potential CSRF issue
GeoTools OGC Filter SQL Injection Vulnerabilities
GeoServer OGC Filter SQL Injection Vulnerabilities
XML External Entity (XXE) vulnerability in apoc.import.graphml
Privilege escalation in Strongbox
CSRF vulnerability in Jenkins Coverity Plugin allow capturing credentials
CSRF vulnerability in Synopsys Jenkins Coverity Plugin
Cross-site Scripting in Jenkins Email Extension Plugin
Cross-site Scripting in Jenkins Email Extension Plugin
Sandbox escape in Jenkins Email Extension Plugin
Arbitrary file deletion in ureport
Arbitrary code execution in de.tum.in.ase:artemis-java-test-sandbox
XML External Entity Reference in Apache NiFi
StaticHandler disclosure of classpath resources on Windows when mounted on a wildcard route
Apache Kafka Connect vulnerable to Deserialization of Untrusted Data
Insecure Permissions issue in jeecg-boot
Insecure Permissions issue in jeecg-boot
Insecure Permissions issue in jeecg-boot
Apache InLong contains Out-of-bounds Read vulnerability
Apache Linkis contains Deserialization of Untrusted Data
Path Traversal In Eclipse GlassFish
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.