Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Cross-site scripting in json-sanitizer
Deserialization of Untrusted Data in Jodd
Out of bounds read in json-smart
Cross-site Scripting by SVG upload in xwiki-platform
Cross-Site Request Forgery in xwiki-platform
Improper Certificate Validation in Graylog
Deserialization of Untrusted Data in Apache Dubbo
Apache CXF JMX Integration is vulnerable to a MITM attack
Possible SQL injection in tablelookupwizard Contao Extension
Cross-site scripting in forkcms
Unrestricted Uploads in Concrete5
Cross-Site Request Forgery in CakePHP
Cross-site Scripting in RosarioSIS
Zip slip in Microweber
Code injection in Twig
Gadget chain attack in Nippy
Injection in DeltaSpike
Cross-site scripting in Apache Atlas
Apache Geode SSL endpoint verification vulnerability
Cross-site Scripting in Contao
Exposure of Sensitive Information to an Unauthorized Actor in Concord
Vulnerability in Torpedo Query
Unrestricted Upload of File with Dangerous Type in Liferay Portal and Liferay DXP
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.