Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Missing permission check in Jenkins Script Security Plugin
Rebuilding a run with revoked script approval allowed by Jenkins Pipeline: Groovy Plugin
Restarting a run with revoked script approval allowed by Jenkins Pipeline: Declarative Plugin
Stored XSS vulnerability in Jenkins Authorize Project Plugin
Script security bypass vulnerability in Jenkins Shared Library Version Override Plugin
Session fixation vulnerability in Jenkins OpenId Connect Authentication Plugin
FileManager Deserialization of Untrusted Data vulnerability
UnoPim Stored XSS : Cookie hijacking through Create User function
Symfony has an Authentication Bypass via RememberMe
drupal/postfile - SA-CONTRIB-2024-060
drupal/postfile - SA-CONTRIB-2024-059
DotNetZip Directory Traversal vulnerability
Moodle IDOR when accessing list of badge recipients
Craft CMS vulnerable to Potential Remote Code Execution via missing path normalization & Twig SSTI
Craft CMS Arbitrary System File Read
Local File System Validation Bypass Leading to File Overwrite, Sensitive File Access, and Potential Code Execution
dom-iterator code execution vulnerability
Gameplan <= 1.5.10 - Reflected Cross-Site Scripting
Themify Builder <= 7.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Chartify – WordPress Chart Plugin <= 2.9.5 - Unauthenticated Local File Inclusion via source
AJAX Random Posts <= 0.3.3 - Unauthenticated PHP Object Injection
Full Screen (Page) Background Image Slideshow <= 1.1 Authenticated (Administrator+) Stored Cross-Site Scripting
wp-login customizer <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.