Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Apache NiFi Code Injection vulnerability
Field injection in the KirbyData text storage handler
Insufficient Session Expiration after a password change
XML External Entity (XXE) vulnerability in the XML data handler
Cross-site scripting (XSS) from MIME type auto-detection of uploaded files
Denial of service from unlimited password lengths
Anyone with a share link can RESET all website data in Umami
Code injection in PowerJob
Code injection in stanford-parser
Code injection in BoofCV
Code injection in oscore
Code injection in wix-embedded-mysql
Code injection in webmagic-core
Code injection in Duke
SQL injection in jeecg-boot
Cross-site Scripting in Mingsoft MCMS
Unrestricted Upload of File with Dangerous Type in the Ajaxmanager File and Database explorer (ajaxmanager) module from RSI for PrestaShop
Obfuscated email addresses should not be sorted
Unsafe plugins can be installed via pack import by tenant admins
DoS vulnerability for apps with sockets enabled
Bit Assist <= 1.1.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Meks Smart Social Widget <= 1.6 - Missing Authorization to notice dimissal
CartFlows Pro <= 1.11.12 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.