Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersApache Shiro vulnerable to path traversal
Remote Code Execution vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 1.0.0 through 1.2.2.
Apache Solr allows read access to host environmet variables
Cross-site Scripting in JFinal
Cross-site Scripting in JFinal
Qualys Jenkins Plugin for Policy Compliance XML External Entity vulnerability
Qualys Jenkins Plugin for Policy Compliance Cross-site Scripting vulnerability
Qualys Jenkins Plugin for WAS XML External Entity vulnerability
XWiki vulnerable to Denial of Service attack through attachments
XWiki Remote Code Execution Vulnerability via User Registration
XWiki has no right protection on rollback action
Apache Axis Improper Input Validation vulnerability
Ion Java StackOverflow vulnerability
Apache InLong Manager Arbitrary File Read Vulnerability
Apache InLong Manager Remote Code Execution vulnerability
Apache DolphinScheduler: Arbitrary js execute as root for authenticated users
Mingsoft MCMS SQL injection
JeecgBoot server-side template injection
Jeecg Boot SQL injection vulnerability
Jeecg Boot SQL Injection
Infinispan REST Server's cache retrieval endpoints do not properly evaluate the necessary admin permissions
Infinispan REST Server's bulk read endpoints do not properly evaluate user permissions
JLine vulnerable to out of memory error
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.