Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,737
httplib2 0.7.2, 0.8, and earlier, after an initial connection is made, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X
MantisBT allows XSS via the Manage Filter page
MantisBT allows XSS via Edit Filter page
Apache Struts Code injection due to conversion error
XSS in baserCMS before 4.1.4
Improper Input Validation in Apache Spark
cext/manifest.c in Mercurial before 4.7.2 has an out-of-bounds read during parsing of a malformed manifest entry.
LFI in PHP-Proxy 5.1.0
FineUploader php-traditional-server unauthenticated arbitrary file upload vulnerability
Jenkins Cross-site Scripting vulnerability
Unauthenticated File Read in PHP Proxy
Showdoc Forced Browsing
Showdoc CSRF Vulnerability
XSS in PHP-Proxy-App through v3.0
Asset Pipeline plugin for Grails vulnerable to Path Traversal
Umbraco CMS vulnerable to stored XSS
Flarum Core Leaks PII
Exposure of Sensitive Information to an Unauthorized Actor in SonarSource SonarQube API
RDF4J vulnerable to zip slip
Bolt Cross-site Scripting (XSS) via text input click preview button
Dolibarr stored cross-site scripting (XSS) vulnerability
Dolibarr reflected cross-site scripting (XSS) vulnerability
Dolibarr stored cross-site scripting (XSS) vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.