Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersXWiki Platform vulnerable to privilege escalation via async macro and IconThemeSheet from the user profile
XWiki Platform vulnerable to privilege escalation via properties with wiki syntax that are executed with wrong author
XWiki Platform packages Expose Sensitive Information to an Unauthorized Actor
Unprivileged XWiki Platform users can make arbitrary select queries using DatabaseListProperty and suggest.vm
Keycloak vulnerable to user impersonation via stolen UUID code
xwiki-platform vulnerable to Remote Code Execution in Annotations
HTML Injection in Keycloak Admin REST API
Keycloak Cross-site Scripting on OpenID connect login service
Keycloak vulnerable to Cross-site Scripting
RestEasy Reactive implementation of Quarkus allows Creation of Temporary File With Insecure Permissions
XML External Entity (XXE) vulnerability in apoc.import.graphml
Undertow client not checking server identity presented by server certificate in https connections
Cross-site Scripting in Quarkus
Cross Site Scripting in OpenNMS
OpenNMS Meridian and Horizon vulnerable to Cross-site Scripting
OpenNMS Meridian and Horizon vulnerable to Cross-site Scripting
OpenNMS has potential Insertion of Sensitive Information into Log File vulnerability
Improper Privilege Management in Apache Sling
Apollo has potential access control security issue in eureka
apollo-portal has potential CSRF issue
OpenNMS Horizon and Meridian vulnerable to Cross-site Scripting
GeoTools OGC Filter SQL Injection Vulnerabilities
GeoServer OGC Filter SQL Injection Vulnerabilities
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.