Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Always-Incorrect Control Flow Implementation in Facebook Hermes
Wildfly-OpenSSL memory leak flaw
Froala WYSIWYG Editor XSS Vulnerability
MantisBT unauthorized users able to access private files
MantisBT HTML Injection vulnerability
MantisBT XXS where a Custom Field with a crafted Regular Expression property is used
MediaWiki Special:UserRights exposes the existence of hidden users
MediaWiki Cross-site Scripting (XSS) vulnerability
MediaWiki Cross-site Scripting (XSS) vulnerability
MediaWiki Cross-site Scripting (XSS) vulnerability
OATHAuth extension in MediaWiki is not implementing rate limit
MediaWiki Cross-site Scripting (XSS) vulnerability
Liferay Portal and Liferay DXP Bypass via Double Encoded URL
XXE vulnerability in Jenkins Liquibase Runner Plugin
CSRF vulnerability in Jenkins Lockable Resources Plugin
Stored XSS vulnerability in Jenkins Liquibase Runner Plugin
Sandbox bypass vulnerability in Jenkins Script Security Plugin
Missing permission check in Jenkins Implied Labels Plugin allows reconfiguring the plugin
Missing permission check in Jenkins Liquibase Runner Plugin allows enumerating credentials IDs
CSRF vulnerability in Jenkins warnings Plugin allows remote code execution
All versions of package cabot are vulnerable to Cross-site Scripting (XSS) via the Endpoint column.
DotPlant2 Improper Restriction of XML External Entity Reference
CSRF vulnerability in Jenkins ElasTest Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.