Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersMCMS vulnerable to arbitrary code execution via crafted thumbnail
Apache Ranger Hive Plugin missing permissions check
ONOS vulnerable to Cross-site Scripting
Server-side template injection in beetl
Command injection in OpenTSDB
Cross Site Scripting in OpenTSDB
** UNSUPPORTED WHEN ASSIGNED ** The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has
Apache StreamPark LDAP Injection vulnerability
Chosen Ciphertext Attack in Jose4j
Lightbend Alpakka Kafka logs credentials on debug level
Remote code execution in JFinal CMS
Arbitrary javascript injection in Apache Jena
PowerJob vulnerable to incorrect access control
XWiki Platform vulnerable to privilege escalation from view right on XWiki.Notifications.Code.LegacyNotificationAdministration
XWiki Platform vulnerable to code injection from account through AWM view sheet
XWiki Platform's async and display macro allow displaying and interacting with any document in restricted mode
XWiki Platform vulnerable to code injection from account through XWiki.SchedulerJobSheet
XWiki Platform vulnerable to code injection in display method used in user profiles
XWiki Platform vulnerable to code injection from view right on XWiki.ClassSheet
XWiki Platform vulnerable to code injection from account/view through VFS Tree macro
XWiki Platform vulnerable to page render failure due to broken translations
org.xwiki.platform:xwiki-platform-attachment-ui vulnerable to Code Injection
XWiki Platform vulnerable to privilege escalation from view right using Invitation.InvitationCommon
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.