Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Injection in UserFrosting
Cross-site Scripting in Netgen Tags Bundle
showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
Prototype Pollution in js-data
invoiceninja is vulnerable to Cross-site Scripting
Uncontrolled Resource Consumption in parse-link-header
elgg is vulnerable to Cross-site Scripting
Apache Solr Improper Input Validation and Path Traversal
Unrestricted Upload of File with Dangerous Type in unisharp/laravel-filemanager
Incorrect Authorization in latte/latte
Regular expression deinal of service (ReDoS) in is-my-json-valid
Regular Expression Denial of Service (ReDoS) in braces
Inadequate Encryption Strength in Apache NiFi
Missing Authentication for Critical Function in Apache NiFi
Insertion of Sensitive Information into Log File in Apache NiFi Stateless
Improper Restriction of XML External Entity Reference in Apache NiFi
Insertion of Sensitive Information into Log File in Apache NiFi
Apache NiFi Insertion of Sensitive Information into Log File
Server-side request forgery (SSRF) in Apache Batik
Cross-site scripting in Apache NiFi
Cross-site Scripting (XSS) in Apache Ambari Views
Prototype Pollution in copy-props
Sandbox Bypass in Apache Velocity Engine
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.