Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filtersorg.xwiki.platform:xwiki-platform-skin-skinx vulnerable to basic Cross-site Scripting by exploiting JSX or SSX plugins
org.xwiki.platform:xwiki-platform-rendering-xwiki vulnerable to stored cross-site scripting via HTML and raw macro
org.xwiki.platform:xwiki-platform-oldcore Open Redirect vulnerability
org.xwiki.platform:xwiki-platform-rendering-macro-rss Cross-site Scripting vulnerability
org.xwiki.commons:xwiki-commons-xml Cross-site Scripting vulnerability
xwiki-platform-administration-ui vulnerable to privilege escalation
org.xwiki.platform:xwiki-platform-flamingo-theme-ui vulnerable to privilege escalation
org.xwiki.platform:xwiki-platform-flamingo-theme-ui Eval Injection vulnerability
org.xwiki.platform:xwiki-platform-livedata-macro vulnerable to Basic Cross-site Scripting
org.xwiki.platform:xwiki-platform-oldcore makes Incorrect Use of Privileged APIs with DocumentAuthors
org.xwiki.platform:xwiki-platform-security-authentication-default XSS with authenticate endpoints
org.xwiki.platform:xwiki-platform-panels-ui Eval Injection vulnerability
org.xwiki.platform:xwiki-platform-logging-ui Eval Injection vulnerability
xwiki.platform:xwiki-platform-panels-ui Eval Injection vulnerability
org.xwiki.platform:xwiki-platform-wiki-ui-mainwiki Eval Injection vulnerability
org.xwiki.platform:xwiki-platform-notifications-ui Eval Injection vulnerability
org.xwiki.platform:xwiki-platform-legacy-notification-activitymacro Eval Injection vulnerability
org.xwiki.platform:xwiki-platform-oldcore vulnerable to data leak through deleted documents
Jenkins Thycotic DevOps Secrets Vault Plugin does not properly mask credentials
Jenkins Azure Key Vault Plugin does not properly mask credentials
Jenkins Kubernetes Plugin does not properly mask credentials
Goobi viewer Core Reflected Cross-Site Scripting Vulnerability Using LOGID Parameter
Goobi viewer Core has Cross-Site Scripting Vulnerability in User Comments
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.