Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Wise Agent Capture Forms <= 2.0 - Reflected Cross-Site Scripting
Edit Comments XT <= 1.0 - Reflected Cross-Site Scripting
Remote Code Execution in Apache Dubbo
Hessian protocol configuration vulnerability in Apache Dubbo
simpleSAMLphp Authentication <= 0.7.0 - Reflected Cross-Site Scripting
3D Cover Carousel <= 1.0 - Reflected Cross-Site Scripting
RentPress <= 6.6.4 - Reflected Cross-Site Scripting
Twitter Friends Widget <= 3.1 - Reflected Cross-Site Scripting
Custom Menu <= 1.3.3 - Reflected Cross-Site Scripting
Flask-AppBuilder Open Redirect vulnerability
Cross-site scripting
Exposure of Sensitive Information to an Unauthorized Actor
HTTP header injection in Sonatype Nexus Repository
SQL Injection in Subrion CMS
Exposure of Resource to Wrong Sphere in LibreNMS
Improper Input Validation in Firefly III
Arbitrary file upload in Fork CMS
Cross-site scripting in LavaLite-CMS
Improper Authentication in SaltStack Salt
Exposure of Resource to Wrong Sphere in salt
Cross-Site Request Forgery in sqlite-web
WP Google Maps <= 8.1.12 - Authenticated Stored Cross-Site Scripting
SP Rental Manager <= 1.5.3 - Unauthenticated SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.