Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
User enumeration in livehelperchat
Path traversal in Apache James
Open Redirect in node-forge
Denial of service in CBOR library
Umbraco Persistent Password Reset Poison
Umbraco ApplicationURL Overwrite
Unrestricted Upload of File with Dangerous Type in pimcore
Cross-site Scripting in Ericsson CodeChecker
Cross-site Scripting in pimcore
Cross-site Scripting in HTML2PDF
Deserialization of Untrusted Data in Log4j 1.x
SQL Injection in Log4j 1.2.x
Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat
Security Advisory for "Log4Shell"
IBX-1392: Image filenames sanitization
Denial of service in CBOR library
Memory leak in micronaut-core
Cross-site Scripting OrchardCore.Application.Cms.Targets
Arbitrary code execution in H2 Console
Impersonation of other users (passing XBOX Live authentication) by theft of logins in PocketMine-MP
Unhandled exception when decoding form response JSON
Incorrect Default Permissions in log4js
Authorization Bypass Through User-Controlled Key in LiveHelperChat
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.