Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
drupal/opigno_forum - SA-CONTRIB-2019-046
Capstone SEGV caused by a read memory access
GiveWP <= 2.4.6 - Cross-Site Scripting
Photo Gallery by 10Web <= 1.5.24 - Authenticated Local File Inclusion
WP Live Chat Support <= 8.0.27 - Unauthenticated Stored Cross-Site Scripting
Improper Input Validation and Buffer Over-read in mqtt-packet
Exposure of Sensitive Information to an Unauthorized Actor and SQL Injection in Spring Data JPA
Server Side Request Forgery in Apache Axis
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Ratpack
Cross-Site Scripting in simditor
Improper Input Validation in Apache Sanselan
Infinite Loop in Apache Sanselan
Cross-site Scripting in Apache UIMA
Cross-site scripting in Apache Archiva
Improper Input Validation in Apache Archiva
Register IPs <= 1.8.0 - Unauthenticated Stored Cross-Site Scripting
oziogallery - XSS (Cross Site Scripting)
Akeeba LoginGuard - Information Disclosure
RSMembership! older than - Other
RSEvents! Pro Cart Plugin older than - Other
RSEvents! Pro (March 2019) - Other
Ultimate Member <= 2.0.45 - Low-Privileged Stored Cross-Site Scripting
Ultimate Member – User Profile, User Registration, Login & Membership Plugin <= 2.0.45 - Arbitrary File Deletion/Read
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.