Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
PHPMemcachedAdmin Path Traversal vulnerability
Apache Cocoon Improper Restriction of XML External Entity Reference vulnerability
Apache Cocoon SQL Injection vulnerability
Apache DolphinScheduler Missing Authorization vulnerability
Microweber file upload vulnerability
aiohttp's ClientSession is vulnerable to CRLF injection via version
CF7 Google Sheets Connector <= 5.0.5 - Unauthenticated Sensitive Information Exposure via Debug Log
Related Post <= 2.0.53 - Authenticated (Contributor+) Stored Cross-Site Scripting
Quiz Maker <= 6.4.9.4 - Missing Authorization to Email Disclosure
Slider Revolution < 6.6.19 - Authenticated (Author+) PHP Object Injection
Quotes for WooCommerce <= 2.0.1 - Cross-Site Request Forgery
Quiz Maker <= 6.4.9.4 - Reflected Cross-Site Scripting
Quotes for WooCommerce <= 2.0.1 - Missing Authorization
Contact Form 7 <= 5.8.3 - Authenticated (Editor+) Arbitrary File Upload
UserPro <= 5.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Backup Migration <= 1.3.6 - Unauthenticated Arbitrary Backup Download to Sensitive Information Exposure
October CMS stored XSS by authenticated backend user with improper configuration
October CMS safe mode bypass using Twig sandbox escape
October CMS safe mode bypass using Page template injection
Keycloak vulnerable to LDAP Injection on UsernameForm Login
aiohttp's ClientSession is vulnerable to CRLF injection via method
cryptography vulnerable to NULL-dereference when loading PKCS7 certificates
Jenkins NeuVector Vulnerability Scanner Plugin Cross-Site Request Forgery vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.