Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Laravel Redis Horizontal Scaling Insecure Deserialization
Apache Solr: Insufficient file-access checking in standalone core-creation requests
Apache Solr: Unauthorized bypass of certain "predefined permission" rules in the RuleBasedAuthorizationPlugin
Keycloak Admin REST API exposes backend schema and rules
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.36 - Missing Authorization to Unauthenticated Arbitrary Comment Deletion
Keycloak services allows the issuance of access and refresh tokens for disabled users
Keycloak does not validate and update refresh token usage atomically
ImageMagick has a NULL pointer dereference in MSL parser via <comment> tag before image load
ImageMagick has a Memory Leak in LoadOpenCLDeviceBenchmark() when parsing malformed XML
Race Condition in node-tar Path Reservations via Unicode Ligature Collisions on macOS APFS
ImageMagick MSL: Stack overflow via infinite recursion in ProcessMSLScript
Orval has a code injection via unsanitized x-enum-descriptions in enum generation
Claude Code Leaks Data via Malicious Environment Configuration Before Trust Confirmation
Listivo Core <= 2.3.77 - Unauthenticated Local File Inclusion
Salon booking system <= 10.30.3 - Authenticated (Subscriber+) Information Exposure
EcoBlue <= 1.15 - Unauthenticated Local File Inclusion
Real Homes CRM <= 1.0.0 - Authenticated (Subscriber+) Arbitrary File Upload
TaxCloud for WooCommerce <= 8.3.8 - Missing Authorization
Dinatur <= 1.18 - Unauthenticated Stored Cross-Site Scripting
Edwiser Bridge <= 4.3.2 - Missing Authorization
WPO365 <= 40.0 - Authenticated (Subscriber+) Server-Side Request Forgery
Anything Order by Terms <= 1.4.0 - Missing Authorization
Media Library File Size <= 1.6.7 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.