Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filtersApache Pulsar WebSocket Proxy contains an Improper Authentication vulnerability
Velocity execution without script right through tree macro
Keycloak vulnerable to reflected XSS via wildcard in OIDC redirect_uri
Remote code execution/programming rights with configuration section from any user account
XSS/CSRF Remote Code Execution in XWiki.ConfigurableClass
Remote code execution from account through SearchAdmin
Solr search discloses email addresses of users
Solr search discloses password hashes of all users
Apache StreamPark: Authenticated system users could trigger remote command execution
Apache StreamPark: Authenticated system users could trigger SQL injection vulnerability
WSO2 products vulnerable to XML External Entity attack
Allocation of Resources Without Limits in Keycloak
Jenkins Nexus Platform Plugin Cross-Site Request Forgery vulnerability
Jenkins Nexus Platform Plugin missing permission check
Tokens stored in plain text by PaaSLane Estimate Plugin
Password stored in a recoverable format by Jenkins OpenId Connect Authentication Plugin
Tokens stored in plain text by PaaSLane Estimate Plugin
Tokens stored in plain text by Dingding JSON Pusher Plugin
Displayed in plain text by Dingding JSON Pusher Plugin
Cross Site Request Forgery in Silverpeas
Broken access control in Silverpeas
Improper JWT Signature Validation in SAP Security Services Library
Cross-site Scripting in JFinalCMS
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.