Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,638
Apache JSPWiki CSRF due to crafted request on UserPreferences.jsp
Apache JSPWiki XSS due to incomplete patch for CVE-2021-40369
Apache Hadoop argument injection vulnerability
Raneto vulnerable to Cross-site Scripting
Raneto v0.17.0 employs weak password complexity requirements
Raneto Denial of Service via crafted payload injected into `Search` parameter
Testimonial Slider <= 2.2.6 - Stored Cross-Site Scripting
WP-MUI – Mass User Input – Add and Export WP Users Quickly <= 1.8 - Missing Authorization
Minimal Coming Soon – Coming Soon Page <= 2.33 - Authenticated (Admin+) Stored Cross-Site Scripting
Twitter Bootstrap Slider <= 1.1.3 - Authenticated (Admin+) Cross-Site Scripting
WordPress to Hootsuite <= 1.4.5 - Authenticated (Admin+) Cross-Site Scripting
WordPress to Buffer <= 3.8.1 - Authenticated (Admin+) Cross-Site Scripting
Cyclone Slider <= 3.2.0 - Authenticated (Admin+) Arbitrary File Upload
Protect WP Admin <= 3.7 - Cross-Site Scripting
Contempo Real Estate Custom Posts <= 3.2.6 - Unauthorized File Upload
PostmagThemes Demo Import <= 1.0.6 - Authenticated (Admin+) Arbitrary File Upload
Simple Telegram <= 0.9.3 - Authenticated (Admin+) Stored Cross-Site Scripting
WooCommerce Product Carousel, Slider & Grid Ultimate <= 1.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Sensei LMS <= 4.5.1 - Missing Authorization
Sensei LMS <= 4.4.3 - Information Disclosure
Multivendor Marketplace Solution for WooCommerce – WC Marketplace <= 3.8.11.8 - Multiple Unprotected AJAX Actions
Download Manager <= 3.2.53 - Reflected Cross-Site Scripting
Django vulnerable to Reflected File Download attack
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.