Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
ChakraCore RCE Vulnerability
Apache ORC vulnerable to Uncontrolled Recursion
Yii Framework reflected Cross-site Scripting
Craft CMS PHP Code Injection Vulnerability
Contao Information Disclosure via Access Control Flaws
RCE in baserCMS before 4.1.4
Pippo RCE Vulnerability
Joomla RCE Vulnerability
Improper Access Control in Telerik Extensions
Elefant CMS PHP Code Execution Vulnerability
Gleez CMS Vulnerability Allows Forced Browsing to Profile Page of Other Users
SEOmatic plugin for Craft CMS SSTI Vulnerability
Arbitrary code execution in Richfaces
RichFaces vulnerable to Expression Language Injection
Moodle calculated question type allows remote code execution by Question authors
ChakraCore RCE Vulnerability
ChakraCore RCE Vulnerability
Dolibarr arbitrary commands execution
Jenkins HipChat Plugin allows attackers with Overall/Read access to obtain credential IDs
Jenkins SonarQube Scanner Plugin stored server authentication token in plain text
Jenkins Jira Plugin Incorrect Authorization vulnerability
Jenkins Crowd 2 Integration Plugin stored credentials in plain text
Jenkins Artifactory Plugin stored old directly entered credentials unencrypted on disk
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.