Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Ultimate Member <= 2.3.1 - Arbitrary Redirect
Arbitrary filesystem write access from velocity.
URL Rewrite vulnerability in multiple zendframework components
Multiple valid tokens for password reset in Shopware
Malfunction of CSRF token validation in Shopware
Reflected XSS on clients-registrations endpoint
Keycloak is vulnerable to IDN homograph attack
Keycloak is vulnerable to IDN homograph attack
Reflected Cross-site Scripting in Shopware storefront
Denial-of-Service when binding invalid parameters in sqlite3
Arbitrary file access through XML parsing in org.xwiki.commons:xwiki-commons-xml
OIDC Logout redirect in keycloak
Improper Input Validation in httpx
Hermit 音乐播放器 <= 3.1.6 - Multiple Cross-Site Request Forgery
Countdown & Clock <= 2.3.2 - Pro Features Lock Bypass
Hermit 音乐播放器 <= 3.1.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Hermit 音乐播放器 <= 3.1.6 - Unauthenticated SQL Injection
Hermit 音乐播放器 <= 3.1.6 - Authenticated (Subscriber+) SQL Injection
Countdown, Coming Soon, Maintenance – Countdown & Clock <= 2.3.2 - Cross-Site Scripting
Countdown & Clock <= 2.3.2 - Reflected Cross-Site Scripting
Ravpage <= 2.16 - Reflected Cross-Site Scripting
Countdown & Clock <= 2.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Footer Text <= 2.0.3 - Cross-Site Request Forgery to Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.