Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,073
Reset filtersApache Tomcat Session Fixation vulnerability
Apache Tomcat Improper Resource Shutdown or Release vulnerability
Bouncy Castle for Java bcpkix, bcprov, bcpkix-fips on All (API modules) allows Excessive Allocation
Liferay Portal 7.4.0 and Liferay DXP have a reflected cross-site scripting (XSS) vulnerability
Liferay Portal and Liferay DXP have a reflected cross-site scripting vulnerability
Bouncy Castle for Java on All (API modules) allows Excessive Allocation
Liferay Portal and Liferay DXP have a Denial Of Service via File Upload (DOS) vulnerability
Liferay Portal and Liferay DXP vulnerable to Server-Side Request Forgery
Liferay Portal and Liferay DXP vulnerable to Server-Side Request Forgery
Liferay Portal Reflected XSS in blogs-web
Apache CXF: Untrusted JMS configuration can lead to RCE
Apache Seata: Deserialization of untrusted Data in Apache Seata Server
ExecuTorch integer overflow vulnerability
ExecuTorch out-of-bounds access vulnerability
ExecuTorch integer overflow vulnerability
ExecuTorch heap buffer overflow vulnerability
ExecuTorch vulnerable to Heap-based Buffer Overflow
XWiki exposes passwords and emails stored in fields not named password/email in xml.vm
XWiki leaks password hashes and other accessible password properties
XWiki allows Reflected XSS in two templates
Liferay Portal CAPTCHA Bypass for Gogo Shell
Apache Zeppelin: Arbitrary file read by adding malicious JDBC connection string
Apache Zeppelin: Missing Origin Validation in WebSockets vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.