Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Exposure of Sensitive Information in simple-get
Improper Authentication in phpmyadmin
Cross-site Scripting in phpmyadmin
Path traversal in Apache Karaf
Insecure Java Deserialization in Apache Karaf
Cross-site Scripting in microweber
Cross-site Scripting in microweber
Cross-site Scripting and Open Redirect in Products.ATContentTypes
Cross-site Scripting in calibreweb
Missing authentication in ShenYu
Password exposure in ShenYu
Missing authentication in ShenYu
Code injection in ShenYu
SQL injection in Moodle
Insufficient user authorization in Moodle
Insufficient user authorization in Moodle
Cross Site Request Forgery in Moodle
vditor Vulnerable to Cross-site Scripting in SVG events
Perfect Brands for WooCommerce <= 2.0.4 - Server Information Disclosure
Perfect Brands for WooCommerce <= 2.0.4 - Unauthorized Brand Creation
Cross-site Scripting in Crater Invoice
Server Side Twig Template Injection
Cross-site Scripting in grav
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.