Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 310
Reset filtersXWiki Platform vulnerable to cross-site scripting in target parameter via share page by email
XWiki Platform vulnerable to stored cross-site scripting in ClassEditSheet page via name parameters
XWiki Platform vulnerable to privilege escalation (PR) from view right via Invitation application
Solon vulnerable to deserialization of untrusted data
Cross-site scripting in Liferay Portal
Cross-site scripting in Liferay Portal
Cross-site scripting in Liferay Portal
Cross-site scripting in Liferay Portal
Cross-site scripting in Liferay Portal
Cross-site scripting in Liferay Portal
alkacon-OpenCMS vulnerable to stored Cross-site Scripting
Jenkins AppSpider Plugin Cross-Site Request Forgery vulnerability
Jenkins AppSpider Plugin missing permission check
ONOS vulnerable to Cross-site Scripting
Server-side template injection in beetl
XWiki Platform vulnerable to code injection from view right on XWiki.ClassSheet
Snowflake JDBC vulnerable to command injection via SSO URL authentication
Jenkins Quay.io trigger Plugin Cross-site Scripting vulnerability
XXL-JOB vulnerable to Cross-site Scripting
lambdaisland/uri `authority-regex` returns the wrong authority
ONOS vulnerable to reflected cross-site scripting
xwiki vulnerable to Improper Handling of Exceptional Conditions
Keycloak vulnerable to Cross-site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.