Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Improper Authorization and Origin Validation Error in OneFuzz
Skaut bazar <= 1.3.3 - Reflected Cross-Site Scripting
WP Fountain <= 1.5.9 - Reflected Cross-Site Scripting
jQuery Tagline Rotator <= 0.1.5 - Reflected Cross-Site Scripting
Media Usage <= 0.0.4 - Reflected Cross-Site Scripting
Simple Behance Portfolio <= 0.2 - Reflected Cross-Site Scripting
Custom Post Type Relations <= 1.0 - Reflected Cross-Site Scripting
Moova for WooCommerce <= 3.5 - Reflected Cross-Site Scripting
Plugmatter Pricing Table Lite <= 1.0.32 - Reflected Cross-Site Scripting
Calendar_plugin <= 1.0 - Reflected Cross-Site Scripting
Timing based private key exposure in Bouncy Castle
Padding oracle attacks
Cross-site scripting in jfinal
XML External Entity Reference
Cross-site scripting in Apache Jena Fuseki
Authentication Bypass by Alternate Name in Apache Tomcat
HTTP Request Smuggling in Apache Tomcat
Improper Handling of Exceptional Conditions in Apache Tomcat
Use after free and segfault in shape inference functions
TypoFR <= 0.11 - Reflected Cross-Site Scripting
Multiplayer Games <= 3.7 - Reflected Cross-Site Scripting
Sidebar Adder 2 <= 2.0.0 - Reflected Cross-Site Scripting
Smart Email Alerts <= 1.0.10 Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.