Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,073
Reset filtersApache Kylin Server-Side Request Forgery (SSRF) Vulnerability
Apache Kylin Files or Directories Accessible to External Parties
QOS.CH logback-core is vulnerable to Arbitrary Code Execution through file processing
Liferay Portal Vulnerable to XSS in Web Content translation
Liferay Portal Vulnerable to IDOR via audit events
Liferay Portal vulnerable to reflected cross-site scripting via the `redirect` parameter
Liferay Portal vulnerable to path traversal and denial-of-service in the ComboServlet
Liferay Portal vulnerable to cross-site scripting in the web content template
Liferay Portal vulnerable to cross-site scripting in the Calendar widget
Liferay Portal vulnerable to cross-site scripting in the Calendar widget
Liferay Portal vulnerable to reflected cross-site scripting on the page configuration page
Liferay Portal vulnerable to cross-site scripting in the related asset selector
MinIO Java Client XML Tag Value Substitution Vulnerability
WSO2's Input Validation Management Service contains Observable Discrepancy when Multi-Attribute Login is enabled
Hutool allows remote code execution (RCE) via the QLExpressEngine class
Liferay Portal and DXP vulnerable to a memory leak
Apache ZooKeeper: Insufficient Permission Check in AdminServer Snapshot/Restore Commands
Apache IoTDB: DoS Vulnerability
Deserialization of Untrusted Data vulnerability in Apache IoTDB.
Liferay Portal and DXP does not properly expire sessions
WSO2 Identity Server Apps allows content spoofing in logs
Http4s vulnerable to HTTP Request Smuggling due to improper handling of HTTP trailer section
WSO2 carbon-apimgt affected by an authenticated stored cross-site scripting (XSS) vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.