Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersJenkins Team Concert Plugin does not perform permission checks in methods implementing form validation
JeecgBoot vulnerable to SQL injection in queryFilterTableDictInfo
JeecgBoot vulnerable to SQL injection in queryTableDictItemsByCode
Solon vulnerable to deserialization of untrusted data
Whaleal IceFrog is vulnerable to deserialization
jeecg-boot SQL injection vulnerability
jeecg-boot unrestricted file upload vulnerability
snappy-java's unchecked chunk length leads to DoS
snappy-java's Integer Overflow vulnerability in compress leads to DoS
snappy-java's Integer Overflow vulnerability in shuffle leads to DoS
HuTool XML parsing module has blind XXE vulnerability
Liferay Portal and Liferay DXP Vulnerable to Open Redirect via the Layout Module
Liferay Portal and Liferay DXP Vulnerable to CSRF via the Layout Module
Liferay Portal and Liferay DXP Vulnerable to XSS via the Layout Module
Guava vulnerable to insecure use of temporary directory
jjson vulnerable to stack exhaustion
jsonij vulnerable to stack exhaustion
sojo vulnerable to stack exhaustion
json-io vulnerable to stack exhaustion
htmlcleaner vulnerable to stack exhaustion
ph-json vulnerable to stack exhaustion
pbjson vulnerable to stack exhaustion
JSONUtil vulnerable to stack exhaustion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.