Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Vite XSS vulnerability in `server.transformIndexHtml` via URL payload
Test code in published microsoft-graph-beta package exposes phpinfo()
Test code in published microsoft-graph-core package exposes phpinfo()
Amelia 1.2.18 - 1.2.36 - Unauthenticated Sensitive Information Exposure
PyDrive2's unsafe YAML deserialization in LoadSettingsFile allows arbitrary code execution
Data leak of password hash through change requests
Elasticsearch-hadoop Unsafe Deserialization
Cross-Site Request Forgery in JFinalCMS via admin/nav/delete
Cross-Site Request Forgery in JFinalCMS via /admin/category/updateStatus
Cross-Site Request Forgery in JFinalCMS via /admin/category/delete
Cross-Site Request Forgery in JFinalCMS via /admin/category/update
Cross-Site Request Forgery in JFinalCMS via /admin/tag/save
Cross-Site Request Forgery in JFinalCMS via /admin/div/delete
Cross-Site Request Forgery in JFinalCMS via /admin/category/save
Cross-Site Request Forgery in JFinalCMS via /admin/nav/save
Cross-Site Request Forgery in JFinalCMS via /admin/div/update
Cross-Site Request Forgery in JFinalCMS via /admin/nav/update
Cross-Site Request Forgery in JFinalCMS
Cross-Site Request Forgery in JFinalCMS via /admin/form/save
Cross-Site Request Forgery in JFinalCMS via /admin/slide/update
Cross-Site Request Forgery in JFinalCMS via /admin/tag/update
Cross-Site Request Forgery in JFinalCMS via the component /admin/friend_link/save
Cross-Site Request Forgery in JFinalCMS via /admin/friend_link/delete
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.