Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Cross-site Scripting in Jenkins Naginator Plugin
Whole-script approval in Jenkins Script Security Plugin vulnerable to SHA-1 collisions
SSL/TLS certificate validation unconditionally disabled by Jenkins NS-ND Integration Performance Publisher Plugin
Insufficient Entropy in PHPServerMon PRNG
PHPServerMon PRNG has Insufficient Entropy
Unsafe deserialization in Apache MINA SSHD
Cross-Site Request Forgery in feehi/feehicms
Plugin for Google Reviews <= 2.2.2 - Missing Authorization
Plugin for Google Reviews <= 2.2.2 - Cross-Site Request Forgery
SVG Support 2.5 - 2.5.1 - Insecure Plugin Defaults to Cross-Site Scripting
Welcart e-Commerce <= 2.8.3 - Cross-Site Request Forgery
Donation Button <= 4.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Donation Button <= 4.0.0 - Missing Authorization
Easy Form Builder <= 3.3.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Quiz and Survey Master <= 8.0.4 - Improper Input Validation
WooCommerce Shipping – DPD baltic <= 1.2.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Permalink Manager Lite <= 2.2.20.1 - Cross-Site Request Forgery
Apache Archiva subject to arbitrary directory deletion by users.
Apache Archiva vulnerable to Sensitive Information Disclosure via anonymous user
Concrete CMS vulnerable to Reflected Cross-site Scripting
Concrete CMS vulnerable to Reflected Cross-site Scripting via image manipulation library
Insufficient Session Expiration in GitHub repository ikus060/rdiffweb prior to 2.5.0.
Concrete CMS vulnerable to Cleartext Transmission of Sensitive Information
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.