Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Liferay Portal and Liferay DXP cross-site scripting (XSS) vulnerability via the script console
Liferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS) in edit blog entry page
Liferay Portal vulnerable to cross-site scripting (XSS) via the keywords parameter
Liferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS)
Liferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS) in the Gogo Shell module
Liferay Portal and Liferay DXP fails to check origin of event messages
Incorrect Authorization in @uppy/companion
Cross-site Scripting in GeniXCMS
OS Command injection in npm-lockfile
SQL injection in net.mingsoft:ms-mcms
SQL injection in net.mingsoft:ms-mcms
Elasticsearch privilege escalation
XML External Entity Reference in Hazelcast
Spring Cloud Gateway vulnerable to Code Injection when Gateway Actuator endpoint enabled, exposed, unsecured
Conference Scheduler <= 2.4.3 - Reflected Cross-Site Scripting
Freemius SDK <= 2.4.2 - Missing Authorization Checks
Twisted SSH client and server deny of service during SSH handshake.
Exposure of home directory through shescape on Unix with Bash
Leading white space bypasses protocol validation
Ansible discloses sensitive information in traceback error message
Execution with Unnecessary Privileges in arc-electron
Prototype Pollution in jquery.cookie
Liferay Portal and Liferay DXP has incorrect default permissions for site members
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.