Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Unspecified vulnerability in Trac before 0.11.2 allows attackers to cause a denial of service via unknown attack vectors related to "certain wiki markup."
TYPO3 Cross-site Scripting vulnerability in the file backend module
Unspecified vulnerability in the HTML sanitizer filter in Trac before 0.11.2 allows attackers to conduct phishing attacks via unknown attack vectors.
typo3/cms-felogin Cross-site Scripting vulnerability
Mayaa Cross-site Scripting vulnerability
Improper Neutralization of Directives in Dynamically Evaluated Code in Spring Framework
Apache Struts improper action name cleanup
Apache Struts Open Redirect
Apache Struts vulnerable to possible DoS attack when using URLValidator
Apache Struts Access Control Redirect
Liferay Portal Vulnerable to XSS via a Knowledge Base Article Title
Liferay Portal XSS Vulnerability
Liferay Portal XSS Vulnerability
Improper Input Validation in Apache Commons Email
Liferay Portal Vulnerable to XSS via Mishandled Title or Summary in the Web Content Display
Liferay Portal Vulnerable to XSS via an Invalid portletId
Liferay Portal Vulnerable to XSS via a Crafted Redirect Field
OpenPGP 1.2.0 and earlier decrypts arbitrary messages
Craft CMS XSS Vulnerability
Electron vulnerable to remote command execution
ChakraCore information disclosure vulnerability
MantisBT vulnerable to XSS via unsanitized filter field in manage_user_page.php
Moodle SQL injection via user preferences
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.