Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Deserialization of untrusted data in Apache Cayenne
Open redirect in microweber
Cross-site Scripting in Drupal Core
Path Traversal in S-Cart
Sandbox bypass in vm2
Cross-Site Request Forgery in Magnolia CMS
Improper Restriction of XML External Entity Reference in Magnolia CMS
Deserialization of Untrusted Data in Magnolia CMS
Arbitrary code execution in Magnolia CMS
Arbitrary code execution in Magnolia CMS
Uncaught Exception in fastify-multipart
Cross Site Request Forgery in concrete5/concrete5
Cross-site Scripting in microweber
ThinkPHP Remote Code Execution (RCE) vulnerability
Email Subscribers & Newsletters <= 5.3.1 - Authenticated (or Cross-Site Request Forgery) Blind SQL Injection
Prototype Pollution in handlebars
Command injection in git-parse
OS Command Injection in install-package
OS Command Injection in git-add-remote
Open Redirect in koa-remove-trailing-slashes
Cross-site Scripting in vmd
OS Command Injection in node-key-sender
Injection in op-browser
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.