Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
aiohttp's ClientSession is vulnerable to CRLF injection via version
CF7 Google Sheets Connector <= 5.0.5 - Unauthenticated Sensitive Information Exposure via Debug Log
Related Post <= 2.0.53 - Authenticated (Contributor+) Stored Cross-Site Scripting
Quiz Maker <= 6.4.9.4 - Missing Authorization to Email Disclosure
Slider Revolution < 6.6.19 - Authenticated (Author+) PHP Object Injection
Quotes for WooCommerce <= 2.0.1 - Cross-Site Request Forgery
Quiz Maker <= 6.4.9.4 - Reflected Cross-Site Scripting
Quotes for WooCommerce <= 2.0.1 - Missing Authorization
Contact Form 7 <= 5.8.3 - Authenticated (Editor+) Arbitrary File Upload
UserPro <= 5.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Backup Migration <= 1.3.6 - Unauthenticated Arbitrary Backup Download to Sensitive Information Exposure
October CMS stored XSS by authenticated backend user with improper configuration
October CMS safe mode bypass using Twig sandbox escape
October CMS safe mode bypass using Page template injection
Keycloak vulnerable to LDAP Injection on UsernameForm Login
aiohttp's ClientSession is vulnerable to CRLF injection via method
cryptography vulnerable to NULL-dereference when loading PKCS7 certificates
Jenkins NeuVector Vulnerability Scanner Plugin Cross-Site Request Forgery vulnerability
Jenkins NeuVector Vulnerability Scanner Plugin missing permission check
Jenkins MATLAB Plugin XML External Entity vulnerability
Jenkins Google Compute Engine Plugin has incorrect permission checks
Jenkins Jira Plugin vulnerable to exposure of system-scoped credentials
Jenkins MATLAB Plugin missing permission checks
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.