Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersHL7 FHIR Partial Path Zip Slip due to bypass of CVE-2023-24057
Cross-site Scripting vulnerability in Jenkins
Incorrect Authorization in Jenkins Core
Information disclosure through error stack traces related to agents
Incorrect Authorization in Jenkins Core
Incorrect Permission Preservation in Jenkins Core
Denial of service in Jenkins Core
Denial of service in Jenkins Core
Cross site scripting vulnerability in update-center2
Apache Log4j 1.x (EOL) allows Denial of Service (DoS)
XWiki Platform vulnerable to data leak via Improper Restriction of XML External Entity Reference
org.xwiki.platform:xwiki-platform-panels-ui vulnerable to Eval Injection
Apache Dubbo vulnerable to Deserialization of Untrusted Data
OpenSearch has issue with fine-grained access control of indices backing data streams
OpenSearch has time discrepancy in authentication responses
jeecg-boot contains SQL Injection vulnerability
xwiki contains Incorrect Authorization
XWiki-Platform vulnerable to stored Cross-site Scripting via the HTML displayer in Live Data
xwiki vulnerable to Improper Handling of Exceptional Conditions
xwiki contains Exposed Dangerous Method or Function
org.xwiki.platform:xwiki-platform-flamingo-theme-ui Eval Injection vulnerability
XWiki Platform subject to Uncontrolled Resource Consumption
XWiki Platform users may execute anything with superadmin right through comments and async macro
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.