Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filtersXWiki OIDC Authenticator: Users with "view" access can create tokens for any users they can view
Liferay Portal exposes sensitive user data through its Freemarker template
QOS.CH logback-core is vulnerable to Arbitrary Code Execution through file processing
MinIO Java Client XML Tag Value Substitution Vulnerability
WSO2's Input Validation Management Service contains Observable Discrepancy when Multi-Attribute Login is enabled
Liferay Portal and DXP vulnerable to a memory leak
Liferay Portal and DXP does not properly expire sessions
WSO2 Identity Server Apps allows content spoofing in logs
Http4s vulnerable to HTTP Request Smuggling due to improper handling of HTTP trailer section
Liferay Portal and DXP audit events record password reminder answers
H2O affected by a deserialization vulnerability
Liferay Contacts Center widget has insecure direct object reference
Keycloak SMTP Inject Vulnerability
jinjava has Sandbox Bypass via JavaType-Based Deserialization
Jenkins has a log message injection vulnerability
Jenkins has a missing permission check, allowing users to obtain agent names
Jenkins is missing a permission check in the authenticated users' profile menu
Spring Expression language property modification using Spring Cloud Gateway Server WebFlux
Openfire has potential identity spoofing issue via unsafe CN parsing
Apache Fory Deserialization of Untrusted Data vulnerability
Liferay Portal has External Control of System or Configuration Settings
Liferay Portal has Improper Validation of Specified Quantity in Input
Liferay Portal's Organization Selector exposes organization data to remote authenticated users
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.