Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
eCommerce Product Catalog Plugin for WordPress <= 3.5.5 - Unauthenticated SQL Injection
Fluent Booking <= 2.1.1 - Authenticated (Calendar Manager+) Information Exposure
Kali Forms <= 2.4.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Wow Viral Signups <= 2.1 - Unauthenticated SQL Injection
Support Plus Responsive Ticket System <= 9.1.2 - Unauthenticated Stored Cross-Site Scripting
Mac Photo Gallery <= 3.0 - Unauthenticated Arbitrary File Deletion
KittyCatfish <= 2.2 - Unauthenticated SQL Injection
Car Park Booking System <= 1.0 - Unauthenticated SQL Injection
Apptha Slider Gallery <= 1.0 - Unauthenticated Arbitrary File Download
Coupon Affiliates – Affiliate Plugin for WooCommerce <= 7.8.1 - Authenticated (Subscriber+) Information Exposure
Simply Poll <= 1.4.1 - Unauthenticated SQL Injection
FUXA's scheduler API missing admin check enables operator-to-admin escalation via scheduled device actions
FUXA has SQL Injection in its TDengine DAQ connector via backslash bypass of escapeTdString
FUXA: Unauthenticated SSRF via Socket.IO DEVICE_WEBAPI_REQUEST and DEVICE_PROPERTY with response reading
Poweradmin: CSV Injection in log export endpoints allows formula execution in spreadsheet applications
Netty has Insufficient Bailiwick Validation for NS Records
Netty HTTP/2: Advertised MAX_CONCURRENT_STREAMS are not enforced
Netty: SCTP reassembly nests buffers without bound
Netty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records
Netty: DNS Cache Poisoning due to Predictable PRNG and Default Static Source Port
Netty: Unix-socket fd receive leaks descriptors when peer sends two at once
Netty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes
PHPSpreadsheet has a patch bypass for CVE-2026-34084
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.