Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
OpenStack Octavia Amphora-Agent not requiring Client-Certificate
Centreon Sensitive Data Exposure
Centreon Does Not Set HTTPOnly Flag
In Ansible, all Ansible Engine versions up to ansible-engine 2.8.5, ansible-engine 2.7.13, ansible-engine 2.6.19, were logging at the DEBUG level which lead to a disclosure of credentials if a plugin
Centreon Privilege Escalation
TeamPass Stored Cross-site Scripting
TeamPass Stored Cross-site Scripting
TeamPass Stored Cross-site Scripting
Liferay Portal Allows RCE via Deserialization of a JSON Payload
android-gif-drawable Double Free vulnerability
Cross-site Scripting in Eclipse Mojarra
Deserialization of Untrusted Data in org.codehaus.jackson:jackson-mapper-asl
Jenkins LDAP Email Plugin shows plain text password in configuration form
Jenkins HTML Publisher Plugin vulnerable to Cross-site Scripting
Improper Control of Generation of Code in Jenkins Script Security Plugin
DingTalk Plugin stores credentials in plain text
Jenkins SourceGear Vault plugin transmits credentials in plain text
Cleartext Transmission of Sensitive Information in Apache MINA
phpBB Cross-Site Request Forgery (CSRF)
Dolibarr stored Cross-site Scripting in an Email Template section
Dolibarr Cross-site Scripting in a User Profile in a Signature section
Dolibarr Cross-site Scripting in a User Note section
Dolibarr stored Cross-site Scripting vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.