Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filtersImproper Check for Unusual or Exceptional Conditions in Elasticsearch
Server-Side Request Forgery in Jodd HTTP
Cross site scripting in XXL-job
Dev error stack trace leaking into prod in Play Framework
Denial of service binding form from JSON in Play Framework
Path Traversal in XWiki Platform
Regular expression denial of service in apache tika
Path traversal in CureKit
Cross-site Scripting in wiki manager join wiki page
Cross-site Scripting in the Flamingo theme manager
Possible information disclosure inside TreeGrid component with default data provider
Reversible One-Way Hash in io.github.javaezlib:JavaEZ
Limited Authentication Bypass for Media Files
JFinal file validation vulnerability
Undertow Uncontrolled Resource Consumption
Wildfly-Core user account mismanagement
undertow Race Condition vulnerability
Liferay Portal and Liferay DXP fails to invalidate password reset tokens after use
Improper Certificate Validation in MongoDB
Exposure of Resource to Wrong Sphere in Liferay Portal
Jenkins NeuVector Vulnerability Scanner Plugin stored credentials in plain text
Jenkins Gem Publisher Plugin stores credentials as plaintext
Jenkins Aqua Security Scanner Plugin showed plain text password in configuration form
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.