Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 437
Reset filtersEmissary has an OS Command Injection via Unvalidated IN_FILE_ENDING / OUT_FILE_ENDING in Executrix
Jackson Core: Document length constraint bypass in blocking, async, and DataInput parsers
FHIR Validator HTTP service has SSRF via /loadIG Chains with startsWith() Credential Leak for Authentication Token Theft
Micronaut vulnerable to DoS via crafted form-urlencoded body binding with descending array indices
jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition
Junrar has an arbitrary file write due to backslash Path Traversal bypass in LocalFolderExtractor on Linux/Unix
weixin4j has Improperly Controlled Sequential Memory Allocation
MessagePack for Java Vulnerable to Remote DoS via Malicious EXT Payload Allocation
Liferay Portal and DXP Instance Admin can execute code using Objects Actions and Validations
Liferay Portal and DXP do not check permissions of images in a blog entry
Liferay Portal and DXP use an incorrect cache-control header
Liferay Portal and DXP affected by multiple cross-site scripting (XSS) vulnerabilities in web content template’s select structure page
Liferay Portal Vulnerable to Reflected XSS via the selectedLanguageId Parameter
Liferay Portal is vulnerable to XSS in the Blogs widget
Liferay Portal is vulnerable to DNS rebinding attacks
Liferay Portal vulnerable to password enumeration
Liferay Portal Vulnerable to DoS via Crafted Headless API Request
Liferay Portal Vulnerable to CSRF in Headless APIs
Liferay Portal Does Not Limit Access to APIs Before Email Verification
Liferay Portal Stores Password Reset Tokens in Plain Text
Liferay Portal Vulnerable to Information Exposure Through a Log File Vulnerability in LDAP Import Feature
Liferay Portal Vulnerable to Cross-Site Scripting
Liferay Portal Vulnerable to Open Redirect via the _com_liferay_layout_admin_web_portlet_GroupPagesPortlet_redirect parameter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.