Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
OpenZeppelin Contracts vulnerable to Improper Escaping of Output
Critters Cross-site Scripting Vulnerability
OpenNMS Horizon XXE Injection Vulnerability
xuxueli xxl-job Cross-Site Request Forgery Vulnerability
SUCHMOKUO node-worker-threads-pool denial of service Vulnerability
Margox Braft-Editor Cross-site Scripting Vulnerability
MrSwitch hello.js vulnerable to prototype pollution
ThinkCMF Cross-site Scripting Vulnerability
Gila CMS Cross-site Scripting Vulnerability
apache-airflow-providers-apache-drill Improper Input Validation vulnerability
GitPython vulnerable to remote code execution due to insufficient sanitization of input arguments
Authenticated Local Privilege Escalation vulnerability in Intel Optimization for Tensorflow
Froxlor vulnerable to business logic errors
SB Child List <= 4.5 - Cross-Site Request Forgery via 'sb_cl_update_settings'
SendPress Newsletters <= 1.23.11.6 - Missing Authorization
WooCommerce PDF Invoice Builder <= 1.2.90 - Cross-Site Request Forgery via Save
Avartan Slider Lite <= 1.5.3 - Reflected Cross-Site Scripting via 'asview-nouce'
flowpaper <= 1.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
WP HTML Mail <= 3.4.0 - Cross-Site Request Forgery via 'send_test'
PixTypes <= 1.4.15 - Reflected Cross-Site Scripting
Printful Integration for WooCommerce <= 2.2.2 - Cross-Site Request Forgery
Kangu para WooCommerce <= 2.2.10 - Reflected Cross-Site Scripting
ARMember Premium <= 5.9.2 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.