Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 437
Reset filtersCross-site scripting in Liferay Portal
Cross-site scripting in Liferay Portal
Cross-site scripting in Liferay Portal
Cross-site scripting in Liferay Portal
Chosen Ciphertext Attack in Jose4j
json-smart Uncontrolled Recursion vulnerability
Jettison vulnerable to infinite recursion
GeoTools OGC Filter SQL Injection Vulnerabilities
GeoServer OGC Filter SQL Injection Vulnerabilities
Wildfly-elytron possibly vulnerable to timing attacks via use of unsafe comparator
Path Traversal In MeterSpere leads to upload file to any path
Yauaa vulnerable to ArrayIndexOutOfBoundsException triggered by a crafted Sec-Ch-Ua-Full-Version-List
TemporaryFolder on unix-like systems does not limit access to created files
Inefficient Regular Expression Complexity in Liferay Portal
Liferay Portal and Liferay DXP Vulnerable to SQL Injection via Friendly URL Module
Liferay Portal and Liferay DXP Vulnerable to SQL Injection via the Fragment Module
Path Traversal in Liferay Portal
Liferay Portal and Liferay DXP Vulnerable to SQL Injection via the Layout Module
Liferay Portal and Liferay DXP Vulnerable to XSS via the Commerce Module
Liferay Portal and Liferay DXP Vulnerable to XSS via the Portal Search Module
Liferay Portal and Liferay DXP Vulnerable to XSS via the Sharing Module
Liferay Portal and Liferay DXP Vulnerable to XSS via the Announcements Module
Liferay Portal and Liferay DXP Includes LDAP Credentials in the Page URL
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.