Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filtersorg.xwiki.platform:xwiki-platform-rest-server allows SQL injection in query endpoint of REST API
org.xwiki.platform:xwiki-platform-oldcore allows SQL injection in short form select requests through the script query API
io.jmix.localfs:jmix-localfs has a Path Traversal in Local File Storage
Unregistered users can see "public" messages from a closed wiki via notifications from a different wiki
Apache Pulsar Kafka Connector Logs Sensitive Information in Application Logs
The XWiki JIRA extension allows data leak through an XXE attack by using a fake JIRA server
Jenkins Missing Permission Check
Jenkins Missing Permission Check
Jenkins Cadence vManager Plugin Stores Verisium Manager vAPI keys Unencrypted
Jenkins Templating Engine Plugin Vulnerable to Arbitrary Code Execution
jooby-pac4j: deserialization of untrusted data
Apache Pinot Vulnerable to Authentication Bypass
Apache ActiveMQ Artemis User Without Create Address Permissions can Modify Address Routing-Type
WildFly Elytron OpenID Connect Client ExtensionOIDC authorization code injection attack
OpenDaylight SFC Allows Unauthorized Privileged Execution via Crafted Request
OpenDaylight SFC Insecure Shiro Cookie Configuration
OpenDaylight SFC Denial of Service (DoS)
Apache Commons VFS Has Relative Path Traversal Vulnerability
aizuda snail-job Vulnerable to Deserialization via `nodeExpression` Argument
Apache Oozie Cross-Site Scripting (XSS)
Liferay Portal and Liferay DXP Reveals Data via Forms
H2O Vulnerable to Arbitrary File Overwrite
H2O Vulnerable to Denial of Service (DoS) via `HEAD` Request
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.