Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Hide My WP <= 6.2.3 - Authorization Bypass
Hide My WP <= 6.2.3 - SQL Injection
Prototype Pollution in algoliasearch-helper
Arbitrary file reading vulnerability in Aim
Path traversal in Matrix Synapse
Cross-site Scripting in django-wiki
Server-Side Request Forgery in Concrete CMS
Server-Side Request Forgery in Concrete CMS
Exposure of sensitive information in Apache Ozone
Password exposure in concrete5/core
Improper Privilege Management in Concrete CMS
Incorrect Authorization in Apache Ozone
Apache Ozone exposes OM, SCM and Datanode metadata
Incorrect permissions in Apache Ozone
Cross-site Scripting in snipe/snipe-it
Cross-site Scripting in kimai2
Cross-site Scripting in kimai2
Cross-site Scripting in kimai2
Improper Privilege Management in Apache Ozone
Incorrect Authorization in Apache Ozone
Apache Ozone user impersonation due to non-validation of Ozone S3 tokens
Incorrect Authorization in Apache Ozone
Exposure of sensitive information in concrete5/core
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.