Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Improper Validation and Sanitization in url-parse
Resource Exhaustion Denial of Service in http-proxy-agent
Cross-Site Request Forgery in com.softwaremill.akka-http-session:core_2.12
Incorrect sanitisation function leads to `XSS` in mermaid
Improper Certificate Validation in Apache IoTDB
XSS in svg2png (NPM package)
Deserialization of Untrusted Data in Apache Heron
Incorrect Calculation in the MSR JavaScript Cryptography Library
Cross-site scripting in Apache Syncome EndUser
Stored XSS vulnerability in Jenkins Scriptler Plugin
Stored XSS vulnerability in Jenkins Scriptler Plugin
ReDOS in Vfsjfilechooser2
Infinite loop in Apache CFX
Cross-Site Request Forgery in Moodle
XSS vulnerability on email template preview page
jsx-slack insufficient patch for CVE-2021-43838 ReDoS
Improper Authorization in Keycloak
AjaxNetProfessional deserializes arbitrary JavaScript objects
Remote code injection, Improper Input Validation and Uncontrolled Recursion in Log4j library
Client-Side JavaScript Prototype Pollution in oro/platform
Ultimate Product Catalog – WordPress Catalog Plugin <= 5.0.25 - Cross-Site Request Forgery
RVM - Responsive Vector Maps <= 6.4.1 - Subscriber+ Arbitrary File Read
WordPress Core < 5.8.3 - Authenticated (Author+) Stored Cross Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.