Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 437
Reset filtersLiferay Portal Vulnerable to Cross-Site Scripting (XSS) via a Journal Article Title
Liferay Portal Allows Cross-Site Scripting (XSS) via the SimpleCaptcha API
Caucho Quercus, as distributed in Resin, overwrites entries in SERVER superglobal array on basis of POST parameters
Liferay Portal Vulnerable to XSS in Profile Search Functionality
Shell command injection in Liferay Portal
Jenkins Script Security Plugin allows for Bypass of Groovy Sandbox Protection
Liferay Portal Vulnerable to XSS via a Knowledge Base Article Title
Liferay Portal XSS Vulnerability
Liferay Portal XSS Vulnerability
Liferay Portal Vulnerable to XSS via Mishandled Title or Summary in the Web Content Display
Liferay Portal Vulnerable to XSS via an Invalid portletId
Liferay Portal Vulnerable to XSS via a Crafted Redirect Field
Liferay Portal XSS vulnerability via movie parameter in the /html/portal/flash.jsp page
Cross-site Scripting in Graylog
Cross-site Scripting in Graylog Server
Cross-site Scripting in Graylog Server
Improper Neutralization of Input During Web Page Generation in JAMon
Apache XML Security For Java vulnerable to Infinite Loop
Infinispan: Deserialization of untrusted data in the Hot Rod Java client via automatic byte-array deserialization
Liferay Portal vulnerable to arbitrary command injection
Uncontrolled Resource Consumption in Artemis and HornetQ
Liferay Portal and Liferay DXP allows arbitrary injection via web content template names
Liferay Portal and Liferay DXP allows arbitrary injection via the site name
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.