Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Prototype pollution in object-path
Ability to switch customer email address on account detail page and stay verified
Inline attribute values were not processed.
Unprotected dynamically loaded chunks
Cross-site scripting (XSS) vulnerability in the fallback authentication endpoint
Ciphertext Malleability Issue in Tink Java
Stockdio Historical Chart < 2.8.1 - Reflected Cross-Site Scripting
libtaxii Server-Side Request Forgery vulnerability
Regular Expression Denial of Service in npm-user-validate
Memory exhaustion in http4s-async-http-client with large or malicious compressed responses
RCE in XWiki
Arbitrary Code Execution in blazar-dashboard
TI WooCommerce Wishlist <= 1.21.11 and TI WooCommerce Wishlist Pro <= 1.21.4 - Arbitrary Options Update
Comment Press <= 2.7.1 - Cross-Frame Scripting
Realia <= 1.4.0 - Arbitrary Post Deletion
drupal/oauth_server_sso - SA-CONTRIB-2020-034
Mailster <= 2.4.5.1 - Stored Cross-Site Scripting
Live Chat – Live support <= 3.1.0 - Cross-Site Request Forgery
Child Theme Creator by Orbisius <= 1.5.1 - Cross-Site Request Forgery to Arbitrary File Modification and Creation
Privilege Escalation in Channelmgnt plug-in for Sopel
Cross-site Scripting in Joplin
Brizy Page Builder <= 2.3.11 - Incorrect Authorization Checks Allowing Post Modification
TemporaryFolder on unix-like systems does not limit access to created files
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.