Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersLiferay Portal and Liferay DXP Vulnerable to XSS via the filter_ Prefix
Liferay Portal and Liferay DXP Fails to Check Permissions in Translation Module
Liferay Portal and Liferay DXP Vulnerable to XSS via Tag Name
Liferay Portal and Liferay DXP Vulnerable to XSS in the Site Module
Liferay Portal and Liferay DXP HtmlUtil.escapeRedirect Can Be Circumvented
Apache SOAP's RPCRouterServlet allows reading of arbitrary files over HTTP
Liferay Portal Missing Authorization vulnerability
Apache Batik vulnerable to Server-Side Request Forgery
Apache Batik vulnerable to Server-Side Request Forgery
Apache Batik Server-Side Request Forgery
Missing hostname validation in Jenkins View26 Test-Reporting Plugin
Jenkins BigPanda Notifier Plugin stores BigPanda API key unencrypted
Lack of authentication mechanism in Jenkins DotCi Plugin webhook
Jenkins WildFly Deployer Plugin vulnerable to path traversal
Missing permission check in Jenkins build-publisher Plugin
Jenkins extreme-feedback Plugin vulnerable to Missing Authorization
Stored XSS vulnerability in Jenkins Walti plugin
RCE vulnerability in Jenkins DotCi Plugin
Stored XSS vulnerability in Jenkins DotCi Plugin
Jenkins Compuware Common Configuration Plugin vulnerable to Improper Restriction of XML External Entity Reference
Jenkins vulnerable to stored cross site scripting in the I:helpIcon component
CSRF vulnerability and mM
CSRF vulnerability in Jenkins Worksoft Execution Manager Plugin allows capturing credentials
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.