Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Cross-site Scripting in DaSchTour matomo-mediawiki-extension
Apache AGE: Python and Golang drivers allow data manipulation and exposure due to SQL injection
Sling App CMS Cross-site Scripting vulnerability
Header injection in TurboGears
Cross-site Scripting in MobileDetect
Cross-Site Request Forgery in XXL Job
is-url Inefficient Regular Expression Complexity vulnerability
froxlor is vulnerable to privilege escalation from customer to root via directory-options
Payment information sent to PayPal not necessarily identical to created order
OpenZeppelin Contracts contains Improper Verification of Cryptographic Signature
Insecure Permissions issue in jeecg-boot
Insecure Permissions issue in jeecg-boot
Insecure Permissions issue in jeecg-boot
Cross site scripting in automad/automad
Jellyfin Web Cross-Site Scripting (XSS) via Playlist Name
Jellyfin Web Cross-Site Scripting (XSS) via Collection Name
Auto YouTube Importer <= 1.0.3 - Cross-Site Request Forgery
Similar Posts – Best Related Posts Plugin for WordPress <= 3.1.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Podlove Podcast Publisher <= 3.8.2 - Authenticated (Admin+) Stored Cross-Site Scripting
VK All in One Expansion Unit <= 9.85.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Watu Quiz <= 3.3.8 - Authenticated (Admin+) Stored Cross-Site Scripting
GS Insever Portfolio <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
User Activity <= 1.0.1 - IP Address Spoofing
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.