Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,280
Reset filtersApache juddi-client vulnerable to XML External Entity (XXE)
Moderate severity vulnerability that affects org.apache.qpid:apache-qpid-broker-j
Moderate severity vulnerability that affects org.apache.commons:commons-compress
Apache Qpid Broker-J vulnerable to Denial of Service (DoS) via uncontrolled resource consumption
Moderate severity vulnerability that affects com.adobe.xmp:xmpcore
Jetty vulnerable to cache poisoning due to inconsistent HTTP request handling (HTTP Request Smuggling)
Jetty contains an alias issue that could allow unauthenticated remote code execution due to specially crafted request
Eclipse Jetty Server generates error message containing sensitive information
Jetty vulnerable to exposure of sensitive information due to observable discrepancy
Apache Struts vulnerable to remote command execution (RCE) due to improper input validation
Apache Struts vulnerable to remote arbitrary command execution due to improper input validation
Spring Security OAuth vulnerable to remote code execution (RCE)
High severity vulnerability that affects org.apache.hbase:hbase
Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15
jackson-databind vulnerable to remote code execution due to incorrect deserialization and blocklist bypass
jackson-databind vulnerable to deserialization flaw leading to unauthenticated remote code execution
OrientDB-Server vulnerable to Cross-Site Request Forgery
Moderate severity vulnerability that affects org.apache.cxf.fediz:fediz-spring, org.apache.cxf.fediz:fediz-spring2, and org.apache.cxf.fediz:fediz-spring3
High severity vulnerability that affects org.apache.cxf.fediz:fediz-spring and org.apache.cxf.fediz:fediz-spring2
High severity vulnerability that affects org.apache.cxf.fediz:fediz-jetty8, org.apache.cxf.fediz:fediz-jetty9, org.apache.cxf.fediz:fediz-spring, org.apache.cxf.fediz:fediz-spring2, and org.apache.cxf.fediz:fediz-spring3
Moderate severity vulnerability that affects org.apache.cxf.fediz:fediz-jetty8, org.apache.cxf.fediz:fediz-jetty9, and org.apache.cxf.fediz:fediz-spring2
Moderate severity vulnerability that affects org.keycloak:keycloak-core
keycloak-core discloses system properties
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.