Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
WordPress Core < 5.2.4 - Authorization Bypass
WordPress Core < 5.2.4 - Authenticated Stored Cross-Site Scripting via Customizer
Popup-Maker <= 1.8.12 - Unauthenticated information disclosure
Broken Link Checker <= 1.11.8 - Reflected Cross-Site Scripting
WordPress Core < 5.2.4 - Cache Poisoning
WordPress Core < 5.2.4 - Type Confusion
graphite.composer.views.send_email vulnerable to SSRF
SQL Injection in LibreNMS
SQL Injection in LibreNMS
Path Traversal in LibreNMS
Exposure of Sensitive Information to an Unauthorized Actor in LibreNMS
Improper Encoding or Escaping of Output and Injection in LibreNMS
Missing Authentication for Critical Function in LibreNMS
Cross-site scripting in Apache JSPWiki
Cross-site scripting in Apache JSPWiki
Cross-site scripting in Apache JSPWiki
Cross-site scripting in Apache JSPWiki
HTTP Request Smuggling in Netty
Denial of Service in Apache Commons Compress
Arbitrary File Read in html-pdf
High severity vulnerability that affects indico
ARforms <= 3.7.1 - Unauthenticated Arbitrary File Deletion
Missing Authorization in Drupal
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.