Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,528
Displayed in plain text by Dingding JSON Pusher Plugin
Cross Site Request Forgery in Silverpeas
Cross-site Scripting in silverpeas
Broken access control in Silverpeas
Broken access control in Silverpeas
Cross Site Request Forgery in Silverpeas
Missing access control in Silverpeas
Broken access control in Silverpeas
Broken access control in Silverpeas
Improper validation in meraki
Improper JWT Signature Validation in SAP Security Services Library
Denial of service caused by infinite recursion when parsing SVG document
Stored XSS via SVG File Upload
Brute force exploit can be used to collect valid usernames
SMTP misconfiguration leading to "Forgot Password" exploit that leaks registered user email.
Privilege Escalation using Spoofing
Using the directory back payload (“/../”) in a package name allows placement of package in other folders.
DOM-XSS on Backoffice login screen.
Backoffice User can bypass "Publish" restriction
Possible injection of HTML into user invite mails
Alkacon OpenCMS XSS via Mercury template
Path Traversal in GitHub repository mlflow/mlflow prior to 2.9.2.
Google Language Translator <= 6.0.19 - Missing Authorization via admin notifications
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.