Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
XML External Entity Reference in drools
Insufficiently Protected Credentials in PowerJob
Joplin Cross Site Scripting Vulnerability via NOSCRIPT tags
FLV Embed <= 1.2.1 - Cross-Site Request Forgery to Options Update
Page Link Manager <= 1.0b - Cross-Site Request Forgery to Settings Update
Thumbnail For Excerpts <= 2.1 - Cross-Site Request Forgery
WP OER <= 0.9.0 - Cross-Site Scripting
GiveWP – Donation Plugin and Fundraising Platform <= 2.20.2 - Sensitive Information Disclosure
Special Text Boxes <= 5.9.110 - Cross-Site Scripting
iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more <= 3.0.8 - Server-Side Request Forgery
SP Project & Document Manager <= 4.56 - Cross-Site Request Forgery and Cross-Site Scripting
Interactive Medical Drawing of Human Body <= 2.4 - Cross-Site Scripting
WordPress Multisite Content Copier/Updater <= 1.4.0 - Cross-Site Scripting
Hot Linked Image Cacher <= 1.16 - Reflected Cross-Site Scripting
Popup Builder <= 4.1.0 - Cross-Site Request Forgery
Dyslexiefont Free <= 0.0.2 - Cross-Site Scripting
AutoUpdater module fails to validate certain nested components of the bundle
Compromised child renderer processes could obtain IPC access without nodeIntegrationInSubFrames being enabled
Jupyter Notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.12, authenticated requests to the notebook server with `ContentsManager.allow_hidden = False` only
Social Media Share Buttons <= 3.8.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Code injection in Apache NiFi and NiFi Registry
User account escalation in Apache Hadoop
WooCommerce – Product Importer <= 1.5.2 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.