Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
RCE in Mingsoft MCMS
Arbitrary file upload in Mingsoft MCMS
Incorrect Default Permissions and Improper Access Control in snipe-it
orchardcore is vulnerable to Cross-site Scripting
Exposure of Sensitive Information to an Unauthorized Actor in nanoid
SQL Injection in dolibarr
node-fetch forwards secure headers to untrusted sites
crater is vulnerable to Unrestricted Upload of File with Dangerous Type
Unrestricted Upload of File with Dangerous Type in Crater
Cross-site Scripting in epubjs
Cross-site Scripting in Apache Knox SSO
pimcore is vulnerable to Cross-site Scripting
pimcore is vulnerable to SQL Injection
livehelperchat is vulnerable to Cross-site Scripting
pimcore is vulnerable to Cross-site Scripting
icecoder is vulnerable to Cross-site Scripting
calibre-web is vulnerable to Business Logic Errors
corenlp is vulnerable to Improper Restriction of XML External Entity Reference
Infinite Loop in colors.js
Trust Boundary Violation due to Incomplete Blacklist in Test Failure Processing in Ares
Observable Discrepancy and Observable Timing Discrepancy in Jenkins Configuration as Code Plugin
Path Traversal in Jenkins Warnings Next Generation Plugin
Cross-Site Request Forgery in Jenkins
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.