Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Insecure serialization leading to RCE in serialize-javascript
Cross-site scripting vulnerability in TinyMCE
CSRF tokens leaked in URL by canned query form
Admin Menu Plugin <= 1.1 - Reflected Cross-Site Scripting
RSS Feed Widget <= 2.8.0 - Reflected Cross-Site Scripting
Ultimate Appointment Booking & Scheduling < 1.1.10 - Reflected Cross-Site Scripting
Nova Lite < 1.3.9 - Reflected Cross-Site Scripting
Cross-Site Scripting in Prism
Very Simple Quiz <= 1.0.0 - Cross-Site Scripting
XSS via JQLite DOM manipulation functions in AngularJS
CSRF Vulnerability in polaris-website
Reset Password / Login vulnerability in Sulu
drupal/group - SA-CONTRIB-2020-033
drupal/group - SA-CONTRIB-2020-032
Denial of service in fastify
Prototype Pollution in express-fileupload
Code execution in Spring Integration
Operation on a Resource after Expiration or Release in Jetty Server
Reliance on Cookies without validation in OctoberCMS
Stored XSS in October
CSRF vulnerability in save-server
CMP <= 3.8.1 - Missing Authorization
Facebook Chat Plugin <= 1.5 - Missing Capabilities Check
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.