Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Participants Database <= 1.7.5.9 - Unauthorized Cross-Site Scripting
Realtyna RPL - SQL Injection and Abandonware
Scrapy denial of service vulnerability
User Access Manager <= 2.0.8 - Reflected Cross-Site Scripting
User Access Manager <= 1.2.14 - Reflected Cross-Site Scripting
SmokeSignal <= 1.2.6 - Cross-Site Scripting
Akeeba Backup - various issues
Smoke Signal < 1.2.7 - Authenticated Stored Cross-Site Scripting
SQL Shortcode <= 1.1 - SQL Execution
Event Registration Pro - SQL Injection
Designate mDNS DoS through incorrect handling of large RecordSets
ccNewsletter - SQL injection
Cross-site Scripting in Apache Atlas
Apache Atlas produces Stack trace in error response
Cross-site Scripting in Apache Atlas
Cross-site Scripting in Apache Atlas
Insecure cookie storage in Apache Atlas
Street Guesser - SQL Injection
LMS King Pro - SQL Injection
LMS King Lite - SQL Injection
Jayj Quicktag < 1.3.2 - Cross-Site Request Forgery
The checkPassword function in python-kerberos does not authenticate the KDC it attempts to communicate with, which allows remote attackers to cause a denial of service (bad response), or have other un
PyJWT vulnerable to key confusion attacks
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.