Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,406
SB Uploader <= 4.8 - Arbitrary File Upload
sintic_gallery (All Known Versions) - Arbitrary File Upload
WordPress Core < 4.0 - Missing Session Cookie Expiration
OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume (PV) content when reallocating for instances, which al
Oberliga Theme (All Versions) - SQL Injection
Appius Theme <= 1.0 - Full Path Disclosure
Album and Image Gallery with Lightbox – Flagallery Photo Portfolio <= 2.00 - SQL Injection
Album and Image Gallery with Lightbox – Flagallery Photo Portfolio <= 2.00 - SQL Injection
Album and Image Gallery with Lightbox – Flagallery Photo Portfolio <= 2.00 - Arbitrary File Modification
Album and Image Gallery with Lightbox – Flagallery Photo Portfolio < 3.1.0 - Arbitrary File Deletion
Album and Image Gallery with Lightbox – Flagallery Photo Portfolio < 2.53 - SQL Injection
Grou Random Image Widget <= 1.18 - Full Path Disclosure
Album and Image Gallery with Lightbox – Flagallery Photo Portfolio < 2.53 - Sensitive Information Disclosure
Clockstone <= 1.2 - Arbitrary File Upload
OpenStack Keystone intended authorization restrictions bypass
WordPress RokBox <= 2.13 - Abuse of Functionality
WordPress RokBox <= 2.13 - Cross-Site Scripting
WordPress RokBox <= 2.13 - Denial of Service
WordPress RokBox <= 2.13 - Sensitive Data Disclosure
WordPress RokBox <= 2.13 - Full Path Disclosure
WordPress RokBox <= 2.13 - Arbitrary File Upload
WordPress RokBox <= 2.13 - Content Spoofing
Welcart e-Commerce < 1.2.2 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.