Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filtersChosen Ciphertext Attack in Jose4j
Lightbend Alpakka Kafka logs credentials on debug level
Remote code execution in JFinal CMS
XWiki Platform vulnerable to privilege escalation from view right on XWiki.Notifications.Code.LegacyNotificationAdministration
XWiki Platform vulnerable to code injection from account through AWM view sheet
XWiki Platform's async and display macro allow displaying and interacting with any document in restricted mode
XWiki Platform vulnerable to code injection from account through XWiki.SchedulerJobSheet
XWiki Platform vulnerable to code injection in display method used in user profiles
XWiki Platform vulnerable to code injection from view right on XWiki.ClassSheet
XWiki Platform vulnerable to code injection from account/view through VFS Tree macro
XWiki Platform vulnerable to page render failure due to broken translations
org.xwiki.platform:xwiki-platform-attachment-ui vulnerable to Code Injection
XWiki Platform vulnerable to privilege escalation from view right using Invitation.InvitationCommon
Exposure of Sensitive Information to an Unauthorized Actor in org.xwiki.platform:xwiki-platform-office-viewer
XWiki Platform vulnerable to privilege escalation from view right on XWiki.AttachmentSelector
XWiki App Within Minutes app grants space admin rights that allows cross-site scripting
XWiki vulnerable to Code Injection in template provider administration
xwiki-platform-web-templates allows users to be created even when registration is disabled without validation via template macro
xwiki-platform-web-templates vulnerable to Eval Injection
Cross-site Scripting in org.xwiki.commons:xwiki-commons-xml
Code injection via unescaped translations in xwiki-platform
OutOfMemoryError for large multipart without filename in Eclipse Jetty
Improper Neutralization of Script-Related HTML Tags (XSS) in the LiveTable Macro
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.