Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Improper Control of Dynamically-Managed Code Resources in Crafter CMS Crafter Studio
Cross-Site Request Forgery
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
Uncontrolled Resource Consumption in Apache Tomcat
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
SQL injection in hibernate-core
Improper Access Control in infinispan-server-runtime
Data Amplification in Play Framework
Remote code execution in Apache Struts
Serialization vulnerability in Apache Tapestry
push-dir Enables OS Command Injection
TOCTOU Race Condition in Yarn
Prototype Pollution in mout
ua-parser-js Regular Expression Denial of Service vulnerability
Prototype Pollution in js-data
Remote code execution in DolphinScheduler
Remote code execution in Apache TomEE
Path Traversal in Yarn
Signatures are mistakenly recognized to be valid in jsrsasign
Improper privilege handling in Apache Accumulo
TwitterServer Cross-site Scripting via /histograms endpoint
HTTP Response Splitting in WSO2 transport-http
Prototype Pollution in undefsafe
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.