Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Cross-site scripting in forkcms
Unrestricted Uploads in Concrete5
Cross-Site Request Forgery in CakePHP
Cross-site Scripting in RosarioSIS
Zip slip in Microweber
Code injection in Twig
Gadget chain attack in Nippy
Injection in DeltaSpike
Cross-site scripting in Apache Atlas
Apache Geode SSL endpoint verification vulnerability
Cross-site Scripting in Contao
Exposure of Sensitive Information to an Unauthorized Actor in Concord
Vulnerability in Torpedo Query
Unrestricted Upload of File with Dangerous Type in Liferay Portal and Liferay DXP
Deserialization of Untrusted Data in Apache ShardingSphere
Regular Expression Denial of Service in Handlebars
Arbitrary Code Execution in Handlebars
Denial of service in Apache OpenMeetings
Improper file downloads in Apache Tapestry
Cross-site scripting in @atlaskit/editor-core
Prototype Pollution in safetydance
Request logging bypass in Jenkins Audit Trail Plugin
Path Traversal in Eclipse Vert
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.