Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Deserialization of Untrusted Data in Apache Storm
Improper Input Validation and Missing Authentication for Critical Function in Apache ActiveMQ
XML External Entity (XXE) Injection in Apache Solr
Cross-Site Scripting in http-file-server
Cross-Site Scripting in min-http-server
Missing Encryption of Sensitive Data in yarn
ND Shortcodes <= 5.9.1 - Unauthenticated WordPress Options Update
Exposure of Sensitive Information to an Unauthorized Actor in ansible
Improper Access Control in novajoin
Invenio-App vulnerable to host header injection attack
Cross-site Scripting in invenio-communities
Cross-site scripting invenio-records
Cross-site Scripting in invenio-previewer
JoomSport – for Sports: Team & League, Football, Hockey & more < 3.4 - SQL Injection
WP Fastest Cache <= 0.8.9.5 - Directory Traversal
Animate It <= 2.3.5 - Cross-Site Scripting
Animate It <= 2.3.5 - Cross-Site Scripting
Contact Form & SMTP Plugin by PirateForms <= 2.5.1 - Unauthenticated HTML injection
Simple Membership <= 3.8.4 - Cross-Site Request Forgery
Custom Simple RSS < 2.0.7 - Cross-Site Request Forgery
Animate It <= 2.3.5 - Cross-Site Request Forgery
Deserialization of Untrusted Data in EthereumJ
Cross-site scripting in CLEditor
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.