Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersXML External Entity Reference in Apache Sling
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
Exposure of Sensitive Information to an Unauthorized Actor in Apache Qpid Broker for Java
Apache Solr Cross-site scripting Vulnerability
Improper Input Validation in Apache Axis2
The Undertow module of WildFly allows source code disclosure
Mayaa Cross-site Scripting vulnerability
Improper Neutralization of Directives in Dynamically Evaluated Code in Spring Framework
Apache Struts improper action name cleanup
Apache Struts Open Redirect
Apache Struts vulnerable to possible DoS attack when using URLValidator
Apache Struts Access Control Redirect
Liferay Portal Vulnerable to XSS via a Knowledge Base Article Title
Liferay Portal XSS Vulnerability
Liferay Portal XSS Vulnerability
Improper Input Validation in Apache Commons Email
Liferay Portal Vulnerable to XSS via Mishandled Title or Summary in the Web Content Display
Liferay Portal Vulnerable to XSS via an Invalid portletId
Liferay Portal Vulnerable to XSS via a Crafted Redirect Field
Improper Input Validation in OpenSymphony XWork
Apache Tomcat does not follow ServletSecurity annotations
Improper Neutralization of Input During Web Page Generation in Google Web Toolkit
Spring Batch Admin vulnerable to Cross-site request forgery (CSRF) in the file upload functionality
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.