Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
graphite.composer.views.send_email vulnerable to SSRF
SQL Injection in LibreNMS
SQL Injection in LibreNMS
Path Traversal in LibreNMS
Exposure of Sensitive Information to an Unauthorized Actor in LibreNMS
Improper Encoding or Escaping of Output and Injection in LibreNMS
Missing Authentication for Critical Function in LibreNMS
Cross-site scripting in Apache JSPWiki
Cross-site scripting in Apache JSPWiki
Cross-site scripting in Apache JSPWiki
Cross-site scripting in Apache JSPWiki
HTTP Request Smuggling in Netty
Denial of Service in Apache Commons Compress
Arbitrary File Read in html-pdf
High severity vulnerability that affects indico
ARforms <= 3.7.1 - Unauthenticated Arbitrary File Deletion
Missing Authorization in Drupal
Client Dash <= 2.2.0 - Authenticated (Admin+) Cross-Site Scripting
Contact Form Widget – Contact Query, Contact Page, Form Maker, Query Table <= 1.3.8 - Authenticated (Admin+) SQL Injection
LIQUID SPEECH BALLOON < 1.0.7 - Cross-Site Scripting
iThemes Sync <= 2.0.17 - Authentication Bypass
SoundPress Plugin <= 2.2.0 - Stored Cross-Site Scripting
js jobs - Other
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.