Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
web2py remote code execution via hardcoded encryption key in session.connect function
web2py is vulnerable to password brute-force attack
phpWhois arbitrary code execution via a crafted whois record
Apache Geode OQL method invocation vulnerability
Laravel Framework RCE Vulnerability
Improper Limitation of a Pathname to a Restricted Directory in Spring Framework
MAGMI plugin for Magento Unsafe File Upload
Several Zend Products Vulnerable to XXE and XEE attacks
Several Zend Products Vulnerable to XXE and XEE attacks
Several Zend Products Vulnerable to XXE and XEE attacks
Use of a Broken or Risky Cryptographic Algorithm in Apache WSS4J
SimpleXML has XML External Entity (XXE) vulnerability
Moodle SSRF Vulnerability
Centreon Cross-site Scripting Vulnerability
Centreon SQL Injection
Centreon SQL Injection
Centreon XSS Vulnerability
Centreon XSS Vulnerability
Centreon allows SNMP trap SQL Injection
Centreon Command Injection
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
Kirby XSS Vulnerability
ClassLoader manipulation in Apache Struts
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.