Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,528
OpenClaw: Message read actions could skip channel allowlist checks
NEX-Forms <= 9.2.2 - Unauthenticated Stored Cross-Site Scripting via 'real_val__' Parameter
Openstack tripleo-heat-templates unauthenticated file access
OpenStack Nova Filter Scheduler Bypass
OpenStack Nova DoS by rebuilding the same instance with a new image multiple times
OpenStack Nova Denial of service attack on the compute host
Kallithea Routes CSRF Bypass
MySQL Connectors Privilege Escalation
Matrix Synapse Security Filtering Flaw
Cobbler Arbitrary File Read
Openstack Aodh can be used to launder Keystone trusts
OpenStack Keystone Logs Passwords
OpenStack Identity Keystone Improper Privilege Management
OpenStack Identity Keystone Exposure of Sensitive Information
OpenStack Identity Keystone is vulnerable to Block delegation escalation of privilege
OpenStack Identity (Keystone) Denial of Service
Improper Access Control in MySQL Connector Python
OpenStack Horizon Cross-site scripting (XSS) vulnerability
Horizon-Orchestration Cross-site scripting (XSS) vulnerability through resource name
OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability in the Host Aggregates interface
OpenEXR invalid read
OpenEXR invalid write
OpenStack Neutron Race Condition vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.