Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Croogo vulnerable to Cross-site Scripting in title field
Croogo vulnerable to XSS in title field
Croogo vulnerable to XSS in title field
Croogo vulnerable to XSS in title field
Croogo vulnerable to XSS in Blog field
Server-side request forgery vulnerability in Jenkins Mesos Plugin
Jenkins Crowd 2 Integration Plugin server-side request forgery vulnerability
Cross-site Scripting in Jenkins Rebuilder Plugin
model/modelstorage.py in trytond 3.2.x before 3.2.10, 3.4.x before 3.4.8, 3.6.x before 3.6.5, and 3.8.x before 3.8.1 allows remote authenticated users to bypass intended access restrictions and write
PrestaShop PHP Object Injection
Missing Cryptographic Step in OWASP Enterprise Security API for Java
MODX Revolution allows XSS via document resources
MODX Revolution allows XSS through extended user fields
MODX Revolution vulnerable to XSS attack through its User Photo field
EC-CUBE Open redirect vulnerability
www/resource.py in Buildbot before 1.8.1 allows CRLF injection in the Location header of /auth/login and /auth/logout via the redirect parameter. This affects other web sites in the same domain.
mPDF Unsafe Deserialization
Yii Incorrectly Implements CORS
Improper Restriction of XML External Entity Reference in PMD
Laravel Framework Deserialization Vulnerability
Subrion CMS XSS
Kirby XSS Vulnerability
Evolution CMS Cross-site Scripting (XSS)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.