Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Apache Airflow UI Exposes DAG Import Errors to Unauthorized Authenticated Users
Apache Airflow Has an Authorization Bypass That Allows Unauthorized Task Log Access
jsonpath has Arbitrary Code Injection via Unsafe Evaluation of JSON Path Expressions
PatioTime < 2.1 - Unauthenticated PHP Object Injection
Simple Retail Menus <= 4.2.1 - Unauthenticated Local File Inclusion
Construction Landing Page <= 1.4.1 - Missing Authorization
RVCFDI para Woocommerce <= 8.1.8 - Reflected Cross-Site Scripting
Rara Business <= 1.3.0 - Missing Authorization
Upload Files Anywhere <= 2.8 - Unauthenticated Arbitrary File Deletion
Primer MyData for Woocommerce <= 4.2.8 - Unauthenticated Path Traversal
PatioTime < 2.1 - Unauthenticated Local File Inclusion
Dating <= 11.2.0 - Missing Authorization
Bakes And Cakes <= 1.2.9 - Missing Authorization
Travelicious < 1.6.7 - Unauthenticated PHP Object Injection
Easy Form <= 2.7.9 - Missing Authorization
Simple File List <= 6.1.15 - Authenticated (Subscriber+) Arbitrary File Download
KuteShop <= 4.2.9 - Missing Authorization
Business One Page <= 1.3.2 - Missing Authorization
Atarim <= 4.2.1 - Missing Authorization
WooCommerce Bulk Product Editor <= 3.0 - Missing Authorization
Upload Files Anywhere <= 2.8 - Unauthenticated Arbitrary File Download
Cliengo – Chatbot <= 3.0.4 - Missing Authorization
Nestin < 1.2.6 - Unauthenticated PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.