Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filtersDenial of service in Jenkins Core
Apache Log4j 1.x (EOL) allows Denial of Service (DoS)
XWiki Platform vulnerable to data leak via Improper Restriction of XML External Entity Reference
org.xwiki.platform:xwiki-platform-panels-ui vulnerable to Eval Injection
OpenSearch has issue with fine-grained access control of indices backing data streams
OpenSearch has time discrepancy in authentication responses
jeecg-boot contains SQL Injection vulnerability
xwiki contains Incorrect Authorization
XWiki-Platform vulnerable to stored Cross-site Scripting via the HTML displayer in Live Data
xwiki vulnerable to Improper Handling of Exceptional Conditions
xwiki contains Exposed Dangerous Method or Function
org.xwiki.platform:xwiki-platform-flamingo-theme-ui Eval Injection vulnerability
XWiki Platform subject to Uncontrolled Resource Consumption
XWiki Platform users may execute anything with superadmin right through comments and async macro
XWiki Platform may allow privilege escalation to programming rights via user's first name
XWiki Platform vulnerable to privilege escalation via async macro and IconThemeSheet from the user profile
XWiki Platform vulnerable to privilege escalation via properties with wiki syntax that are executed with wrong author
XWiki Platform packages Expose Sensitive Information to an Unauthorized Actor
Unprivileged XWiki Platform users can make arbitrary select queries using DatabaseListProperty and suggest.vm
Keycloak vulnerable to user impersonation via stolen UUID code
xwiki-platform vulnerable to Remote Code Execution in Annotations
HTML Injection in Keycloak Admin REST API
Keycloak vulnerable to Cross-site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.