Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 278
Reset filtersThe redirect_uri validation logic allows for bypassing explicitly allowed hosts that would otherwise be restricted
Grackle has StackOverflowError in GraphQL query processing
Cross Site Request Forgery in Silverpeas
Cross-site Scripting in silverpeas
Broken access control in Silverpeas
Broken access control in Silverpeas
Cross Site Request Forgery in Silverpeas
Missing access control in Silverpeas
Broken access control in Silverpeas
Broken access control in Silverpeas
Authenticated Rundeck users can view or delete jobs they do not have authorization for.
Authenticated users can view job names and groups they do not have authorization to view
mXSS in AntiSamy
codehaus-plexus vulnerable to XML injection
OpenNMS vulnerable to remote code execution
Hazelcast Executor Services don't check client permissions properly
Graylog server has partial path traversal vulnerability in Support Bundle feature
XWiki Platform vulnerable to Code Injection in icon themes
snappy-java's Integer Overflow vulnerability in compress leads to DoS
Payara Server allows remote attackers to load malicious code on the server once a JNDI directory scan is performed
HL7 FHIR Partial Path Zip Slip due to bypass of CVE-2023-24057
XWiki Platform may allow privilege escalation to programming rights via user's first name
Arbitrary code execution in de.tum.in.ase:artemis-java-test-sandbox
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.