Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,737
Pippo RCE Vulnerability
Joomla RCE Vulnerability
Improper Access Control in Telerik Extensions
Elefant CMS PHP Code Execution Vulnerability
Gleez CMS Vulnerability Allows Forced Browsing to Profile Page of Other Users
SEOmatic plugin for Craft CMS SSTI Vulnerability
Arbitrary code execution in Richfaces
RichFaces vulnerable to Expression Language Injection
Moodle calculated question type allows remote code execution by Question authors
ChakraCore RCE Vulnerability
ChakraCore RCE Vulnerability
Dolibarr arbitrary commands execution
Jenkins HipChat Plugin allows attackers with Overall/Read access to obtain credential IDs
Jenkins SonarQube Scanner Plugin stored server authentication token in plain text
Jenkins Jira Plugin Incorrect Authorization vulnerability
Jenkins Crowd 2 Integration Plugin stored credentials in plain text
Jenkins Artifactory Plugin stored old directly entered credentials unencrypted on disk
Jenkins HipChat Plugin allows credential capture due to incorrect authorization
Froxlor PHP Object Injection vulnerability
Jenkins Ansible Plugin man in the middle vulnerability
RubyGems Link Following vulnerability
Incorrect permission checks in Pipeline: Nodes and Processes plugin
ChakraCore RCE Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.