Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Zenario Cross Site Scripting in the Image library
Zenario allows authenticated admin users to upload PDF files containing malicious code
October allows an admin account to upload PDF containing malicious JavaScript
Slim Select has potential Cross-site Scripting issue
OpenC3 Path Traversal via screen controller (`GHSL-2024-127`)
OpenC3 stores passwords in clear text (`GHSL-2024-129`)
OpenC3 Cross-site Scripting in Login functionality (`GHSL-2024-128`)
Jenkins exposes multi-line secrets through error messages
Jenkins item creation restriction bypass vulnerability
Jenkins Credentials plugin reveals encrypted values of credentials to users with Extended Read permission
Jenkins OpenId Connect Authentication Plugin lacks issuer claim validation
Jenkins OpenId Connect Authentication Plugin lacks audience claim validation
Inventree Server-Side Request Forgery vulnerability exposes server port/internal IP
drupal/persistent_login - SA-CONTRIB-2024-044
drupal/tfa - SA-CONTRIB-2024-043
drupal/diff - SA-CONTRIB-2024-042
Social Web Suite – Social Media Auto Post, Social Media Auto Publish <= 4.1.11 - Directory Traversal to Arbitrary File Download
Maspik – Spam blacklist <= 2.1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
LibreNMS vulnerable to Stored Cross-site Scripting via File Upload
Ibtana – WordPress Website Builder <= 1.2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Attribute
WordPress Infinite Scroll - Ajax Load More <= 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via button_label Parameter
LibreNMS has Stored Cross-site Scripting vulnerability in "Alert Transports" feature
LibreNMS has Stored Cross-site Scripting vulnerability in "Device Group" Name
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.