Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
kevinsawicki/http-request Missing certificate validation
TYPO3 Vulnerable to Insecure Deserialization
Typo3 Cross-Site Scripting in Link Handling
Shopware Cross-site Scripting Vulnerability
Chakra Scripting Engine RCE Vulnerability
ChakraCore RCE via Out-of-bounds write
Chakra Scripting Engine RCE via Out-of-bounds write
Chakra Scripting Engine RCE via Out-of-bounds write
Unsafe entry in Script Security list of approved signatures in Pipeline Remote Loader Plugin
XML External Entity processing vulnerability in Pipeline Maven Integration Jenkins Plugin
Plaintext password storage in Jenkins InfluxDB Plugin
Improper handling of untrusted branches in Gitea Jenkins Plugin
Cross-site request forgery vulnerability in Jenkins Artifactory Plugin
Jenkins Warnings NG Plugin Cross-site scripting vulnerability
Jenkins Warnings NG Plugin cross-site request forgery vulnerability
Jenkins Artifactory Plugin missing permission check
Jenkins Artifactory Plugin missing permission check
Jenkins Artifactory Plugin cross-site request forgery vulnerability
TYPO3 Image Processing susceptible to Code Execution
Alkacon OpenCMS XSS via New User module
Cross-site Scripting in Auth0 Lock
EC-CUBE Cross-site request forgery (CSRF) vulnerability
Moodle contains CSRF vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.