Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 310
Reset filtersSilverpeas Core Cross-site Scripting vulnerability
Apache Hive Code Injection vulnerability
OpenMetadata vulnerable to a SpEL Injection in `GET /api/v1/policies/validation/condition/<expr>` (`GHSL-2023-236`)
OpenMetadata vulnerable to a SpEL Injection in `PUT /api/v1/events/subscriptions` (`GHSL-2023-251`)
OpenMetadata vulnerable to SpEL Injection in `PUT /api/v1/policies` (`GHSL-2023-252`)
google-oauth-java-client improperly verifies cryptographic signature
GeoServer's GWC Demos Page vulnerable to Stored Cross-Site Scripting (XSS)
GeoServer's MapML HTML Page vulnerable to Stored Cross-Site Scripting (XSS)
GeoServer's WMS OpenLayers Format vulnerable to Stored Cross-Site Scripting (XSS)
GeoServer's GWC Seed Form vulnerable to Stored Cross-Site Scripting (XSS)
GeoServer's Simple SVG Renderer vulnerable to Stored Cross-Site Scripting (XSS)
GeoServer's Style Publisher vulnerable to Stored Cross-Site Scripting (XSS)
Stored Cross-Site Scripting (XSS) vulnerability in GeoServer's REST Resources API
Apache InLong: Logged-in user could exploit an arbitrary file read vulnerability
Apache Ambari: Various Cross site scripting problems
Liferay Portal Document and Media widget and Liferay DXP vulnerable to stored Cross-site Scripting
Liferay Portal and Liferay DXP vulnerable to stored Cross-site Scripting
Liferay Portal and Liferay DXP vulnerable to reflected Cross-site Scripting
Liferay Portal Expando module and Liferay DXP vulnerable to stored Cross-site Scripting
Liferay Portal and Liferay DXP's Users Admin module vulnerable to stored Cross-site Scripting
Deserialization of Untrusted Data in Apache Camel CassandraQL
Liferay Portal has a Stored XSS with Blog entries (Insecure defaults)
Apache Kylin has Insufficiently Protected Credentials
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.