Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Insecure Credential Storage in web3
Cross-Site Scripting in bootbox
Arbitrary File Overwrite in fstream
Directory Traversal in ltt.js
Cross-site scripting in Apache Tomcat
Reflected Cross-Site Scripting in jquery.terminal
Server-Side Request Forgery in terriajs-server
Out-of-bounds Read in concat-with-sourcemaps
Access control bypass in Apache ZooKeeper
Cross-Site Scripting in shave
XML External Entity injection in Apache Camel
Path Traversal in DKPro Core
Command Injection in Xstream
Cross-site Scripting in remarkable
Denial of Service in axios
Cross-Site Scripting (XSS) in Verdaccio
Finale WooCommerce Sale Countdown <= 2.9.0 - Authenticated Arbitrary File Upload
ConvertPlug <= 3.4.2 - Unauthenticated Administrator Creation
Slick Popup <= 1.7.1 - Privilege Escalation
SAML Single Sign On – SAML SSO Login < 4.8.73 - Cross-Site Scripting
Affiliates Manager <= 2.6.5 - Cross-Site Request Forgery
Hostel <= 1.1.3 - Stored Cross-Site Scripting
Related YouTube Videos <= 1.9.8 - Cross-site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.