Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Jetty HTTP Server Denial of Service vulnerability
Apache Tomcat Denial of Service vulnerability in the Catalina package
Tomcat uses trusted privileges when processing web.xml file
Jakarta Tomcat cross-site scripting (XSS) vulnerability
Jakarta Tomcat Denial of Service vulnerability
Jakarta Tomcat Directory Listing vulnerability
Improper Access Control in snipe/snipe-it
Cross site scripting in FacturaScripts
Ultimate Member <= 2.3.1 - Arbitrary Redirect
Arbitrary filesystem write access from velocity.
URL Rewrite vulnerability in multiple zendframework components
Multiple valid tokens for password reset in Shopware
Malfunction of CSRF token validation in Shopware
Reflected XSS on clients-registrations endpoint
Keycloak is vulnerable to IDN homograph attack
Keycloak is vulnerable to IDN homograph attack
Reflected Cross-site Scripting in Shopware storefront
Denial-of-Service when binding invalid parameters in sqlite3
Arbitrary file access through XML parsing in org.xwiki.commons:xwiki-commons-xml
OIDC Logout redirect in keycloak
Improper Input Validation in httpx
Hermit 音乐播放器 <= 3.1.6 - Multiple Cross-Site Request Forgery
Countdown & Clock <= 2.3.2 - Pro Features Lock Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.