Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Command injection in strapi
Cross-site Scripting in microweber
Cross-site Scripting in microweber
Unrestricted Upload of File with Dangerous Type in MODX Revolution
Cross-site Scripting in Apache JSPWiki
Cross Site Request Forgery in Apache JSPWiki
Logic error in dolibarr/dolibarr
Improper Locking in JetBrains Kotlin
jQuery-Upload-File XSS in fileNameStr
Open redirect in karma
Cross-site Scripting in Weblate
Contact Form X <= 2.4 - Reflected Cross-Site Scripting
Cross site scripting in @awsui/components-react
OS Command injection in Apache Airflow
Apache Airflow Cross-site Scripting Vulnerability
SQL injection in francoisjacquet/rosariosis
Cross site scripting in francoisjacquet/rosariosis
Access Control vulnerability within CoreNLP
File upload restriction bypass in Zenario CMS
Cross site scripting in francoisjacquet/rosariosis
Allocation of Resources Without Limits or Throttling in metadata-extractor
Improper Handling of Exceptional Conditions inn metadata-extractor
Uncaught Exception in zip4j
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.