Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Server-Side Request Forgery in Concrete CMS
Exposure of sensitive information in Apache Ozone
Password exposure in concrete5/core
Improper Privilege Management in Concrete CMS
Incorrect Authorization in Apache Ozone
Apache Ozone exposes OM, SCM and Datanode metadata
Incorrect permissions in Apache Ozone
Cross-site Scripting in snipe/snipe-it
Cross-site Scripting in kimai2
Cross-site Scripting in kimai2
Cross-site Scripting in kimai2
Improper Privilege Management in Apache Ozone
Incorrect Authorization in Apache Ozone
Apache Ozone user impersonation due to non-validation of Ozone S3 tokens
Incorrect Authorization in Apache Ozone
Exposure of sensitive information in concrete5/core
Improper file handling in concrete5/core
Code injection in spring-cloud-netflix-hystrix-dashboard
Moodle vulnerable to RCE via unsafe deserialization
Cross-site Scripting in moodle
WPFront User Role Editor <= 3.2.0 - Reflected Cross-Site Scripting
IDPay for Contact Form 7 <= 2.1.2 - Reflected Cross-Site Scripting
Gwolle Guestbook <= 4.1.2 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.