Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Missing permission check in Jenkins XebiaLabs XL Deploy Plugin allows capturing credentials
CSRF vulnerability in Jenkins XebiaLabs XL Deploy Plugin allows capturing credentials
Incorrect permission check in XebiaLabs XL Deploy Plugin allows capturing credentials
SilverStripe XXE Vulnerability in CSSContentParser
A flaw was found in openstack-neutron's default Open vSwitch firewall rules. By sending carefully crafted packets, anyone in control of a server instance connected to the virtual switch can impersonat
Improper Privilege Management in Spring Framework
XML external entity vulnerability in Jenkins Nuget Plugin
DNS based denial of service in Apache Wicket
XSS vulnerability in Jenkins Markdown Formatter Plugin
XXE vulnerability in Jenkins Filesystem Trigger Plugin
XXE vulnerability in Jenkins URLTrigger Plugin
OpenNMS Horizon vulnerable to XSS
deep-defaults vulnerable to prototype pollution
Plone CMS until version 5.2.4 has a stored Cross-Site Scripting (XSS) vulnerability in the user fullname property and the file upload functionality. The user's input data is not properly encoded when
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) in the Layout Admin Page
Liferay Portal and Liferay DXP May Reveal S3 Store's Proxy Password
Liferay Portal and Liferay DXP Vulnerable to Multiple SQL Injections
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via Asset Module Parameter
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via the Redirect's Admin Page
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via Membership Request Admin Page
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) in Asset Publisher App
Liferay Portal and Liferay DXP Fails to Check Permissions
Liferay Portal and Liferay DXP Reveals Data via Overly Verbose Error Messages
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.