Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 547
Reset filtersPath traversal in Reposilite javadoc file expansion (arbitrary file creation/overwrite) (`GHSL-2024-073`)
Reposilite artifacts vulnerable to Stored Cross-site Scripting
DNSJava DNSSEC Bypass
Remote Code Execution (RCE) vulnerability in geoserver
Classpath resource disclosure in GWC Web Resource API on Windows / Tomcat
GeoServer's Server Status shows sensitive environmental variables and Java properties
DSpace Cross Site Scripting (XSS) via a deposited HTML/XML document
XWiki programming rights may be inherited by inclusion
Keycloak exposes sensitive information in Pushed Authorization Requests (PAR)
Eclipse Ditto vulnerable to Cross-site Scripting
Bouncy Castle crafted signature and public key can be used to trigger an infinite loop
Keycloak vulnerable to session hijacking via re-authentication
Keycloak secondary factor bypass in step-up authentication
XWiki Platform remote code execution from account through UIExtension parameters
XWiki Platform remote code execution from account via custom skins support
XWiki Platform: Privilege escalation (PR) from user registration through PDFClass
XWiki Platform: Password hash might be leaked by diff once the xobject holding them is deleted
quarkus-core leaks local environment variables from Quarkus namespace during application's build
Elasticsearch Incorrect Authorization vulnerability
Jenkins Delphix Plugin has improper SSL/TLS certificate validation
XWiki extension license information is public, exposing instance id and license holder details
Vulnerability affecting the org.openjfx:javafx-media maven component of the OpenJFX project
OpenRefine JDBC Attack Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.