Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
WP Cost Estimation < 9.660 - Upload Directory Traversal
Jetpack < 7.0.1 - Cross-Site Scripting
Newspaper < 9.2.2 - Cross-Site Scripting
Accessibility Suite by Online ADA < 2.0.11 - SQL Injection
Exposure of Sensitive Information to an Unauthorized Actor in Hadoop
Critical severity vulnerability that affects Haraka
Cross-site Scripting in jspwiki-war
Rendertron discloses absolute paths of files
Path Traversal in cordova-plugin-ionic-webview
Superlist - Directory WordPress Theme | Directory & Listings <= 2.9.2 - Stored Cross-Site Scripting
Uncontrolled Memory Consumption in Django
Simple Social Media Share Buttons 2.0.4 - 2.0.21 - Missing Authorization
Path Traversal in simplehttpserver
Prototype Pollution in node.extend
Prototype Pollution in mpath
Prototype Pollution in just-extend
Prototype Pollution in lodash
Prototype Pollution in defaults-deep
Cross-Site Scripting in m-server
Authentication Bypass by Spoofing in express-cart
mcstatic directory traversal vulnerability
Cross-Site Scripting in html-pages
Tnantoka/public XSS Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.