Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 310
Reset filtersQualys Jenkins Plugin for Policy Compliance XML External Entity vulnerability
Qualys Jenkins Plugin for Policy Compliance Cross-site Scripting vulnerability
Qualys Jenkins Plugin for WAS XML External Entity vulnerability
XWiki Remote Code Execution Vulnerability via User Registration
WSO2 Registry Stored Cross Site Scripting (XSS) vulnerability
Alkacon OpenCMS XSS via Mercury template
SaToken privilege escalation vulnerability
Liferay Portal and Liferay DXP Vulnerable to XSS in the Commerce Module
Liferay Portal and Liferay DXP Vulnerable to XSS in the Wiki Widget
Liferay Portal and Liferay DXP Vulnerable to XSS via the Page Tree Menu
Liferay Portal and Liferay DXP Vulnerable to XSS in the Fragment Components
Liferay Portal and Liferay DXP Vulnerable to Stored XSS in the Manage Vocabulary Page
Jetty accepts "+" prefixed value in Content-Length
SSRF vulnerability in Jenkins Bitbucket Push and Pull Request Plugin allows capturing credentials
XWiki Platform Stored Cross-site Scripting in the user profile via the timezone displayer
OpenNMS vulnerable to Cross-site Scripting
Aerospike Java Client vulnerable to unsafe deserialization of server responses
org.xwiki.platform:xwiki-platform-skin-ui Eval Injection vulnerability
XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in DeleteApplication page
XWiki Platform vulnerable to reflected cross-site scripting via back and xcontinue parameters in resubmit template
XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in deletespace template
XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in restore template
XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in delete template
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.