Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Improper Neutralization of CRLF Sequences in urllib3 library for Python
WordPress Download Manager <= 2.9.93 - Cross-Site Scripting
WordPress Core < 5.1.1 - Cross-Site Request Forgery to Cross-Site Scripting via Comments
SQL Injection in sequelize
Advanced Contact form 7 DB <= 1.6.0 - SQL Injection
Visual CSS Style Editor <= 7.2.0 - Unauthenticated Arbitrary Options Update
Ninja Forms - File Uploads <= 3.0.22 - Unauthenticated Arbitrary File Upload
Apache Airflow vulnerable to CSRF Attacks
Apache Airflow vulnerable to Stored XSS
In trytond/model/modelstorage.py in Tryton 4.2 before 4.2.21, 4.4 before 4.4.19, 4.6 before 4.6.14, 4.8 before 4.8.10, and 5.0 before 5.0.6, an authenticated user can order records based on a field fo
Yuzo Related Posts <= 5.12.93 - Missing Authorization to Stored Cross-Site Scripting
Cross-Site Scripting in simple-markdown
Materialize-css vulnerable to Cross-site Scripting in tooltip component
Materialize-css vulnerable to Cross-site Scripting in autocomplete component
Materialize-css vulnerable to Improper Neutralization of Input During Web Page Generation
High severity vulnerability that affects Microsoft.ChakraCore
High severity vulnerability that affects Microsoft.ChakraCore
High severity vulnerability that affects Microsoft.ChakraCore
High severity vulnerability that affects Microsoft.ChakraCore
High severity vulnerability that affects Microsoft.ChakraCore
Microsoft.ChakraCore vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
High severity vulnerability that affects Microsoft.ChakraCore
High severity vulnerability that affects Microsoft.ChakraCore
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.