Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 65
Reset filtersExpression Language Injection in Netflix Conductor
Credentials bypass in Apache Druid
Regular expression Denial of Service (ReDoS) in EmailValidator class in V7 compatibility module in Vaadin 8
Expression Language Injection in Apache Syncope
Improper Input Validation in Hibernate Validator
Regular expression Denial of Service (ReDoS) in EmailValidator class in V7 compatibility module in Vaadin 8
Regular expression denial of service (ReDoS) in EmailValidator class in Vaadin 7
Vulnerability in RPKI manifest validation
Privilege Escalation in Hibernate Validator
Remote Code Execution (RCE) vulnerability in dropwizard-validation
Remote Code Execution (RCE) vulnerability in dropwizard-validation
The SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks
Deserialization of untrusted data in FasterXML jackson-databind
Moderate severity vulnerability that affects io.vertx:vertx-core
Apache Struts allows entering a custom URL in a form field if built-in URLValidator is used
Apache Struts Improper Input Validation vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.