Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
ReDoS in normalize-url
Cross-site scripting in Shopizer
Cross-site scripting in Shopizer
keycloak Self Stored Cross-site Scripting vulnerability
Unsynchronized Access to Shared Data in a Multithreaded Context in RESTEasy
Uncontrolled Resource Consumption in XNIO
Cross-site scripting in Centreon
Predictable CSRF tokens in centreon/centreon
Server-Side Request Forgery in Feehi CMS
SQL Injection in t3/dce
SQL Injection in tribalsystems/zenario
Cross-site scripting in media2click
reflected XSS in tribalsystems/zenario
Remote code execution in zendframework and laminas-http
Cross-site Scripting (XSS) in baserCMS
OS Command Injection in baserCMS
Cross-site Scripting (XSS) in baserCMS
Privilege Context Switching Error in wildlfy
Calipso Arbitrary File Write via Archive Extraction (Zip Slip)
Remote Command Execution in reg-keygen-git-hash-plugin
Django Access Control Bypass possibly leading to SSRF, RFI, and LFI attacks
Path Traversal in Django
JoomSport – for Sports: Team & League, Football, Hockey & more <= 5.1.7 - Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.