Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,073
Reset filtersCSRF vulnerability and missing permission checks in Jenkins kubernetes-cd Plugin allow capturing credentials
Missing permission checks in Jenkins Release Helper Plugin
Stored Cross-site Scripting vulnerability in Jenkins Environment Dashboard Plugin
Arbitrary file read vulnerability in Jenkins kubernetes-cd Plugin
Improper Authorization in org.cometd.oort
Deeply nested json in jackson-databind
Spoofing attack in swagger-ui
Cross-site Scripting in Nacos
pgjdbc Arbitrary File Write Vulnerability
Cross-site Scripting in jeecg-boot
Authentication Bypass by Capture-replay in Apache Spark
Improper Restriction of XML External Entity Reference in Any23
Improper Restriction of XML External Entity Reference in Liquibase
Improper Input Validation and Allocation of Resources Without Limits or Throttling in poi-scratchpad
Remote code execution in net.mingsoft:ms-mcms
Liferay Portal and Liferay DXP fails to properly import users from LDAP
Liferay Portal and Liferay DXP cross-site scripting (XSS) vulnerability via the script console
Liferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS) in edit blog entry page
Liferay Portal vulnerable to cross-site scripting (XSS) via the keywords parameter
Liferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS)
Liferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS) in the Gogo Shell module
Liferay Portal and Liferay DXP fails to check origin of event messages
SQL injection in net.mingsoft:ms-mcms
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.