Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Jodit Editor vulnerable to Cross-site Scripting
Major updates > SQL Injections in PrestaShop appagebuilder module up to 2.4.5
Besu VM vulnerable to gas allocation error in CALL operations
Keycloak SAML javascript protocol mapper: Uploading of scripts through admin console
Liferay Portal and Liferay DXP Vulnerable to XSS in the Portal Search Module
Liferay Portal Path Traversal Vulnerability via the Hypermedia REST APIs Module
Liferay Portal and Liferay DXP Vulnerable to XSS via the filter_ Prefix
Liferay Portal and Liferay DXP Fails to Check Permissions in Translation Module
Liferay Portal and Liferay DXP Vulnerable to XSS via Tag Name
Liferay Portal and Liferay DXP Vulnerable to XSS in the Site Module
Liferay Portal and Liferay DXP HtmlUtil.escapeRedirect Can Be Circumvented
Apache SOAP's RPCRouterServlet allows reading of arbitrary files over HTTP
Liferay Portal Missing Authorization vulnerability
Apache Batik vulnerable to Server-Side Request Forgery
Apache Batik vulnerable to Server-Side Request Forgery
Apache Batik Server-Side Request Forgery
Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.7.
ICEcoder vulnerable to Path Traversal
Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.6.
Toast UI Grid vulnerable to Cross-site Scripting
Seriously Simple Podcasting <= 2.16.0 - Cross-Site Request Forgery
Backup Scheduler <= 1.5.13 - Missing Authorization to Sensitive Information Disclosure
Backup Scheduler <= 1.5.13 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.