Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
High severity vulnerability that affects com.typesafe.akka:akka-http-core_2.11 and com.typesafe.akka:akka-http-core_2.12
WP-DBManager <= 2.79.1 - Directory Traversal Allowing Arbitrary File Deletion
AMP for WP <= 0.9.97.19 - Missing Authorization
Authorization bypass in org.springframework.security.oauth:spring-security-oauth2
Moderate severity vulnerability that affects io.vertx:vertx-core
Moderate severity vulnerability that affects com.sparkjava:spark-core
Improper Input Validation in org.wildfly:wildfly-undertow
Undertow-core vulnerable to HTTP Request Smuggling
Moderate severity vulnerability that affects io.undertow:undertow-core
Eclipse RDF4j vulnerable to XML External Entity
Moderate severity vulnerability that affects org.postgresql:pgjdbc-aggregate
High severity vulnerability that affects org.dspace:dspace-xmlui
Server Side Request Forgery in svgSalamander
High severity vulnerability that affects org.scala-lang:scala-compiler
Improper Input Validation in async-http-client
Android SVG vulnerable to XML External Entity (XXE)
Deserialization of Untrusted Data in swagger-parser
Deserialization of Untrusted Data in swagger-codegen
Stored Cross Site Scripting in Grails Fields Plugin
Improper Certificate Validation in Apache activemq-client
Apache juddi-client vulnerable to XML External Entity (XXE)
Moderate severity vulnerability that affects org.apache.qpid:apache-qpid-broker-j
Moderate severity vulnerability that affects org.apache.commons:commons-compress
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.