Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filtersXWiki Platform Security Authorization Bridge allows users with just edit right can enforce required rights with programming right
Spring Framework DataBinder Case Sensitive Match Exception
Jenkins WSO2 Oauth Plugin Fails to Properly Authenticate User Credentials
Jenkins OpenID Connect Provider Plugin Incorrectly Validates Crafted Build ID Tokens
BoniGarcia WebDriverManager Affected By Improper Restriction of XML External Entity Reference
JRuby-OpenSSL has hostname verification disabled by default
Graylog Allows Session Takeover via Insufficient HTML Sanitization
Apache ActiveMQ: Unchecked buffer length can cause excessive memory allocation
HAL Cross Site Scripting (XSS) vulnerability of user input when storing it in a data store
BRCC Incorrect Access Control vulnerability
org.xwiki.contrib.markdown:syntax-markdown-commonmark12 vulnerable to XSS via Markdown content
Any user with view access to the XWiki space can change the authenticator
XWiki missing authorization when accessing the wiki level attachments list and metadata via REST API
org.xwiki.platform:xwiki-platform-security-requiredrights-default required rights analysis doesn't consider TextAreas with default content type
org.xwiki.platform:xwiki-platform-component-wiki provides no warning when granting XWiki.ComponentClass programming right
Solr script service doesn't take dropped programming right into account
org.xwiki.platform:xwiki-platform-wysiwyg-api Open Redirect vulnerability
Apache Tomcat Denial of Service via invalid HTTP priority header
Apache Tomcat Rewrite rule bypass
Spring Boot EndpointRequest.to() creates wrong matcher if actuator endpoint is not exposed
Apereo CAS has inefficient regular expression complexity
Apereo CAS has inefficient regular expression complexity
Apereo CAS code injection vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.