Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Video Conferencing with Zoom <= 3.8.16 - E-mail Address Disclosure
WP Event Manager <= 3.1.22 - Admin+ Stored Cross-Site Scripting
LoginPress <= 1.5.11 - Reflected Cross-Site Scripting via redirect-page Parameter
WordPress File Upload <= 4.16.2 - Authenticated Stored Cross-Site Scripting via Shortcode
Smart Forms < 2.6.71 - Missing Authorization to Sensitive Information Disclosure
WordPress File Upload <= 4.16.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Malicious SVG
WP Cerber Security <= 8.9.5.2 - Unauthenticated Stored Cross-Site Scripting
OS Command Injection in Microweber
Apache Cassandra vulnerable to Code Injection due to unsafe configuration
Deserialization of untrusted data in Apache Cayenne
Open redirect in microweber
Cross-site Scripting in Drupal Core
Path Traversal in S-Cart
Sandbox bypass in vm2
Cross-Site Request Forgery in Magnolia CMS
Improper Restriction of XML External Entity Reference in Magnolia CMS
Deserialization of Untrusted Data in Magnolia CMS
Arbitrary code execution in Magnolia CMS
Arbitrary code execution in Magnolia CMS
Uncaught Exception in fastify-multipart
Cross Site Request Forgery in concrete5/concrete5
Cross-site Scripting in microweber
ThinkPHP Remote Code Execution (RCE) vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.