Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,690
Jakarta Apache Tomcat Reveals Physical Paths
An attacker can execute malicious javascript in Live Helper Chat
Subrion CMS Cross-site Scripting (XSS) vulnerability in the `contact us` plugin
Improper Authentication in moodle
Missing authorization in Moodle
tagify can pass a malicious placeholder to initiate the cross-site scripting (XSS) payload
Object state limitation has no effect
Object state limitation has no effect
Access control issue in ezsystems/ezpublish-kernel
Subscribe To Comments Reloaded <= 211130 - Cross-Site Request Forgery
Apache James Denial of Service
Jetty HTTP Server Denial of Service vulnerability
Apache Tomcat Denial of Service vulnerability in the Catalina package
Tomcat uses trusted privileges when processing web.xml file
Jakarta Tomcat cross-site scripting (XSS) vulnerability
Jakarta Tomcat Denial of Service vulnerability
Jakarta Tomcat Directory Listing vulnerability
Improper Access Control in snipe/snipe-it
Cross site scripting in FacturaScripts
Ultimate Member <= 2.3.1 - Arbitrary Redirect
Arbitrary filesystem write access from velocity.
URL Rewrite vulnerability in multiple zendframework components
Multiple valid tokens for password reset in Shopware
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.