Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Memberlite Shortcodes <= 1.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Shared Files <= 1.7.5 - Unauthenticated Stored Cross-Site Scripting
Improper neutralization of SQL parameter in Cookie Law - Banner + Cookie blocker module for PrestaShop
Sustainsys.Saml2 Insufficient Identity Provider Issuer Validation
Jenkins temporary plugin file created with insecure permissions
Jenkins does not exclude sensitive build variables from search
Jenkins temporary uploaded file created with insecure permissions
Jenkins Build Failure Analyzer Plugin Cross-Site Request Forgery vulnerability
Jenkins Build Failure Analyzer Plugin Cross-Site Request Forgery vulnerability
Jenkins temporary uploaded file created with insecure permissions
Jenkins Build Failure Analyzer Plugin missing permission check
Jenkins Cross-site Scripting vulnerability
Jenkins Build Failure Analyzer Plugin Cross-site Scripting vulnerability
Drupal core - SA-CORE-2023-006
ReportLab vulnerable to remote code execution via paraparser
Spring for GraphQL may be exposed to GraphQL context with values from a different session
Quarkus HTTP vulnerable to incorrect evaluation of permissions
graphql Uncontrolled Resource Consumption vulnerability
Pillow versions before v10.0.1 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-5129 (previously CVE-2023-4863). Pillow v10.0.1 upgrades the bundled libwebp binary to v1.3.2.
imagecodecs versions before v2023.9.18 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-5129 (previously CVE-2023-4863). imagecodecs v2023.9.18 upgrades the bundled libwebp binary to
File Upload vulnerability in Dolibarr ERP CRM
Dolibarr allows a remote privileged attacker to execute arbitrary code via a crafted command/script
Cross Site Scripting vulnerability in Dolibarr ERP CRM
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.