Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Media File Manager <= 1.4.2 - Reflected Cross-Site Scripting
EventCalendar <= 1.1.21 - Cross-Site Scripting
Command Injection in libnmap
Command Injection in apex-publish-static-files
Unrestricted Upload of File with Dangerous Type in mingsoft:ms-mcms
node-tkinter is malware
tkinter is malware
Path Traversal in minsoft:ms-mcms
Prototype Pollution in merge
drupal/paragraphs - SA-CONTRIB-2018-073
drupal/decoupled_router - SA-CONTRIB-2018-071
GoUrl Bitcoin Payment Gateway & Paid Downloads & Membership <= 1.4.13 - Arbitrary File Upload
WP Editor.md – The Perfect WordPress Markdown Editor < 10.0.4 - Cross-Site Scripting
Apache ActiveMQ web console vulnerable to Cross-site Scripting
Missing Origin Validation in parcel-bundler
Improper Input Validation in kdcproxy
Calendar <= 1.3.10 - Authenticated Stored Cross-Site Scripting
Elegant Themes (Various Versions) - Stored Cross-Site Scripting
Rockhoist Ratings < 1.2.3 - SQL Injection
Elementor Pro <= 2.0.9 - Cross-Site Scripting
Deserialization of Untrusted Data in Pippo
Improper Input Validation in alilibaba:fastjson
Pie Register < 3.0.18 - Unauthenticated Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.