Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Missing permission check in Jenkins Pipeline Maven Integration Plugin allow capturing credentials
Jenkins Cross-Site Scripting vulnerability in help icons
MantisBT XSS issue on the view_all_bug_page.php
Magento DOM-based Cross-site scripting vulnerability
Magento observable timing discrepancy vulnerability
Magento security mitigation bypass vulnerability
Magento path traversal vulnerability
Shopware database password is leaked to an unauthenticated users
Shopware vulnerable to Cross-site Scripting
Shopware vulnerable to SSRF
Wildfly EJB Client causes DoS
A buffer overflow in the patching routine of bsdiff4 before 1.2.0 allows an attacker to write to heap memory (beyond allocated bounds) via a crafted patch file.
MunkiReport Cross-Site Scripting (XSS) Filter Bypass On Comment
MunkiReport Managed Installs module Reflected Cross-Site Scripting (XSS) vulnerability
MunkiReport Software Update module is vulnerable to SQL injection
MunkiReport reportdata module SQL injection vulnerability
MunkiReport munki_facts module Cross-Site Scripting (XSS) vulnerability
Magento stored cross-site scripting vulnerability
Magento php object injection vulnerability
LibreNMS SQL Injection vulnerability
Liferay Portal and Liferay DXP have Insecure Deserialization Vulnerability
Liferay Portal and Liferay DXP Potentially Reveal LDAP Server Password via Unsafe Connection
Microweber Discloses Sensitive Information
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.