Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Apache StreamPark Path Traversal vulnerability
Apache StreamPark Improper Input Validation vulnerability
Apache Superset Server-Side Request Forgery vulnerability
Apache InLong SQL Injection vulnerability
Apache Linkis Unrestricted File Upload vulnerability
Apache Linkis Zip Slip issue
Apache Linkis Authentication Bypass vulnerability
HtmlUnit Code Injection vulnerability
Jenkins AbsInt a³ Plugin XML External Entity Reference vulnerability
Magento Open Source allows Cross-Site Scripting (XSS)
Artesãos SEOTools Open Redirect vulnerability
Artesãos SEOTools Open Redirect vulnerability
Artesãos SEOTools Open Redirect vulnerability
Apache Zeppelin Improper Input Validation vulnerability
is_js vulnerable to Regular Expression Denial of Service
Concrete CMS Cross-site Scripting vulnerability
snyk Code Injection vulnerability
Apache Kylin vulnerable to remote code execution
SQLFluff users with access to config file, using `libary_path` may call arbitrary python code
@vendure/admin-ui-plugin authenticated Cross-site Scripting vulnerability
SQL injection vulnerability in langchain v.0.0.64 allows a remote attacker to obtain sensitive information via the SQLDatabaseChain component.
langchain vulnerable to arbitrary code execution
FluentSMTP <= 2.2.4 - Unauthenticated Stored Cross-Site Scripting via Email Subject
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.