Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Unrestricted Upload of File with Dangerous Type in unisharp/laravel-filemanager
Incorrect Authorization in latte/latte
Regular expression deinal of service (ReDoS) in is-my-json-valid
Regular Expression Denial of Service (ReDoS) in braces
Inadequate Encryption Strength in Apache NiFi
Missing Authentication for Critical Function in Apache NiFi
Insertion of Sensitive Information into Log File in Apache NiFi Stateless
Improper Restriction of XML External Entity Reference in Apache NiFi
Insertion of Sensitive Information into Log File in Apache NiFi
Apache NiFi Insertion of Sensitive Information into Log File
Server-side request forgery (SSRF) in Apache Batik
Cross-site scripting in Apache NiFi
Cross-site Scripting (XSS) in Apache Ambari Views
Prototype Pollution in copy-props
Sandbox Bypass in Apache Velocity Engine
Regular Expression Denial of Service (ReDoS) in lodash
Improper Validation and Sanitization in url-parse
Resource Exhaustion Denial of Service in http-proxy-agent
Cross-Site Request Forgery in com.softwaremill.akka-http-session:core_2.12
Incorrect sanitisation function leads to `XSS` in mermaid
Improper Certificate Validation in Apache IoTDB
XSS in svg2png (NPM package)
Deserialization of Untrusted Data in Apache Heron
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.