Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,690
Pimcore Unrestricted Upload of File with Dangerous Type
Sandbox bypass vulnerability in Jenkins Script Security Plugin
Sandbox bypass vulnerability in Jenkins Script Security Plugin
Sandbox bypass vulnerability in Jenkins Script Security Plugin
Jenkins Aqua Security Serverless Scanner Plugin showed plain text password in job configuration form fields
Jenkins Beaker Builder Plugin has Insufficiently Protected Credentials
Jenkins Dashboard View Plugin vulnerable to Cross-site Scripting
Jenkins Build Environment Plugin vulnerable to Cross-site Scripting
Sandbox bypass vulnerability in Script Security Plugin
Improper Neutralization of Special Elements used in an OS Command in Jenkins Git Client Plugin
An issue was discovered in py-lmdb 0.97. There is a divide-by-zero error in the function mdb_env_open2 if mdb_env_read_header obtains a zero value for a certain size field. NOTE: this outcome occurs w
An issue was discovered in py-lmdb 0.97. For certain values of md_flags, mdb_node_add does not properly set up a memcpy destination, leading to an invalid write operation. NOTE: this outcome occurs wh
An issue was discovered in py-lmdb 0.97. For certain values of mp_flags, mdb_page_touch does not properly set up mc->mc_pg[mc->top], leading to an invalid write operation. NOTE: this outcome occurs wh
An issue was discovered in py-lmdb 0.97. mdb_node_del does not validate a memmove in the case of an unexpected node->mn_hi, leading to an invalid write operation. NOTE: this outcome occurs when access
Cross-site Scripting in LimeSurvey
Liferay Portal Vulnerable to Cross-Site Scripting (XSS) via a Journal Article Title
Cross-site Scripting in LimeSurvey
LibreNMS Information Disclosure
Total.js CMS RCE Vulnerability
Total.js CMS Unauthorized Access
Total.js CMS Path Traversal
Mule modules contain Directory Traversal
OpenStack os-vif Ageing time of 0 disables linuxbridge MAC learning
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.