Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersRegular expression denial of service in apache tika
Path traversal in CureKit
SQL injection in jflyfox jfinal
Missing Authorization in Apache Archiva
Cross-site Scripting in wiki manager join wiki page
Cross-site Scripting in the Flamingo theme manager
Possible information disclosure inside TreeGrid component with default data provider
Reversible One-Way Hash in io.github.javaezlib:JavaEZ
Limited Authentication Bypass for Media Files
JFinal file validation vulnerability
Business Logic Errors in Para
Undertow Uncontrolled Resource Consumption
Wildfly-Core user account mismanagement
undertow Race Condition vulnerability
Liferay Portal and Liferay DXP fails to invalidate password reset tokens after use
Improper Certificate Validation in MongoDB
Keycloak code execution via UMA policy abuse
Improper Certificate Validation in Apache Netbeans
Exposure of Resource to Wrong Sphere in Liferay Portal
Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via the currentURL Parameter
Missing permission check in Jenkins XebiaLabs XL Deploy Plugin allows enumerating credentials IDs
Improper Input Validation in RESTEasy
XSS in Ignite Realtime Openfire via isTrustStore
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.