Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Missing permission checks in Jenkins Katalon Plugin allow capturing credentials
Markdownify subject to Remote Code Execution via malicious markdown file
Liferay Portal and Liferay DXP Vulnerable to XSS in the Frontend Taglib Module
Liferay Portal Vulnerable to XSS in the Object Module
Liferay Portal and Liferay DXP Vulnerable to XSS in the CKEditor Integration with the Frontend Editor Module
Liferay Portal and Liferay DXP Vulnerable to XSS via the Portal Search Module
Liferay Portal and Liferay DXP Vulnerable to XSS via the Role Module
Liferay Portal and Liferay DXP Vulnerable to XSS via the Document Library Module
Lavalite vulnerable to Arbitrary File Read via Directory Traversal
Hessian Lite for Apache Dubbo deserialization vulnerability
Apache Isis webconsole module may directly query the database in prototype mode
Apache Isis Cross-site Scripting vulnerability
ProfileGrid – User Profiles, Memberships, Groups and Communities <= 5.1.0 - Reflected Cross-Site Scripting
Wholesale Suite <= 2.1.5 - Cross-Site Request Forgery
Webmaster Tools Verification <= 1.2 - Missing Authorization to Arbitrary Plugin Deactivation
WPForms Pro <= 1.7.6 - CSV Injection
.NET Remote Code Execution Vulnerability
Kirby CMS vulnerable to user enumeration in the brute force protection
Kirby CMS vulnerable to user enumeration in the code-based login and password reset forms
OroCommerce Cross site scripting vulnerability during shipping rule editing for UPS integration
MySQL JDBC deserialization vulnerability
Field-level access-control bypass for multiselect field
parse-server crashes when receiving file download request with invalid byte range
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.