Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,071
Reset filtersCross-site Scripting in Zenario
Cross-site Scripting in Zenario
Insufficient Entropy in PHPServerMon PRNG
PHPServerMon PRNG has Insufficient Entropy
Cross-Site Request Forgery in feehi/feehicms
Concrete CMS vulnerable to Reflected Cross-site Scripting
Concrete CMS vulnerable to Reflected Cross-site Scripting via image manipulation library
Concrete CMS vulnerable to Cleartext Transmission of Sensitive Information
Concrete CMS vulnerable to Uncontrolled Resource Consumption leading to DoS
Concrete CMS vulnerable to Reflected Cross-Site Scripting via dashboard icons
Concrete CMS vulnerable to Cross-site Scripting via multilingual report
Concrete CMS vulnerable to Cross-site Scripting
Concrete CMS vulnerable to Session Fixation
Concrete CMS vulnerable to Improper Authentication
Concrete CMS vulnerable to XML External Entity
Concrete CMS vulnerable to Cross-site Request Forgery
NukeView CMS vulnerable to Cross-site Scripting
eZ Platform users with the Company admin role can assign any role to any user
eZ Platform users with the Company admin role can assign any role to any user
eZ Platform users with the Company admin role can assign any role to any user
eZ Platform users with the Company admin role can assign any role to any user
Ibexa DXP users with the Company admin role can assign any role to any user
Ibexa DXP users with the Company admin role can assign any role to any user
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.