Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,737
Contao SQL injection in the file manager
CodeIgniter Rest Server XXE Vulnerability
Subrion CMS XSS
infusionsoft-php-sdk reflected Cross-site Scripting
mxGraph vulnerable to cross-site scripting in color field
KeyIdentity LinOTP before 2.10.5.3 has Incorrect Access Control (issue 1 of 2).
Moodle all messaging conversations could be viewed
Moodle Private files uploaded via incoming mail processing could bypass quota restrictions
Moodle Open Redirect Vulnerability
Openstack Magnum Unsafe Credential Handling
MantisBT cross-site scripting (XSS) vulnerability through crafted PATH_INFO
Craft CMS XSS Vulnerability
Shopware Insecure Deserialization Vulnerability
silverstripe restfulserver and registry modules SQL injection vulnerability
Improper Restriction of XML External Entity Reference Jenkins Token Macro Plugin
Jenkins ElectricFlow Plugin cross-site request forgery vulnerability
Jenkins ElectricFlow Plugin is vulnerable to reflected cross site scripting vulnerability
Jenkins ElectricFlow Plugin Missing permission checks
Jenkins JX Resources Plugin missing permission check
Jenkins JX Resources Plugin cross-site request forgery vulnerability
Jenkins ElectricFlow Plugin globally and unconditionally disabled SSL/TLS certificate validation
Jenkins ElectricFlow Plugin missing permission check
Jenkins ElectricFlow Plugin is vulnerable to stored cross site scripting vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.