Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
WPCargo Track & Trace <= 6.9.4 - Admin+ Stored Cross Site Scripting
3xSocializer <= 0.98.22 - Authenticated SQL Injection
Call Now Button <= 1.1.1 - Reflected Cross-Site Scripting
PrestaShop XSS Vulnerability
Hash collision attack vulnerability in Jenkins
JBoss AS may expose root content if excluded-contexts list is mismatched
Contao core SQL Injection Vulnerability
Unrestricted Upload of File with Dangerous Type in Apache Struts2
trytond 2.4: ModelView.button fails to validate authorization
Jenkins CI Game Plugin allows Cross-Site Scripting (XSS)
Jenkins Violation Plugin allows Cross-Site Scripting (XSS)
Jenkins allows Cross-Site Scripting (XSS) via Crafted URL
Jenkins allows Data Insertion and Execution of Code by those with Read and HTTP Access
Moodle included private user files in course backups
Moodle default permissions too permissive
Moodle backs up private files
Hadoop symlink vulnerability
Denial of service in HtmlUnit-Neko
Cross-site Scripting in OWASP AntiSamy
Cross-site Scripting in OWASP AntiSamy
SQL Injection found in Pimcore
Cross-site Scripting in Microweber
Cross Site Request Forgery in Mingsoft MCMS
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.