Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Magento Improper Authorization vulnerability
RoadRunner is at risk of HTTP Request/Response Smuggling through vulnerable dependency
Elasticsearch Vulnerable to Stack Overflow due to a Large Recursion
Joomla Framework Database Package Vulnerable to SQL Injection
Joomla CMS Multi-Factor Authentication Bypass
Elasticsearch-grok Potential Node Crash due to Large Recursion in `innerForbidCircularReferences` Function
Shopware Broken ACL on Document retrieval to access other customers documents
Shopware Vulnerable to Blind SQL-injection in DAL aggregations
WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.22 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Upload
Pimcore's Admin Classic Bundle allows HTML Injection
Shopware allows Denial Of Service via password length
Shopware 6 allows attackers to check for registered accounts through the store-api
Bulk Product Sync <= 8.6 - Unauthenticated SQL Injection
WpEvently <= 4.3.6 - Authenticated (Contributor+) PHP Object Injection
WP Remote Thumbnail <= 1.3.2 - Authenticated (Contributor+) Arbitrary File Upload
Calculated Fields Form <= 5.2.61 - Authenticated (Admin+) Stored Cross-Site Scripting
Processing Projects <= 1.0.2 - Authenticated (Shop Manager+) Arbitrary File Upload
Hive Support <= 1.2.11 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Site Notify <= 1.0 - Missing Authorization
WP User Profiles <= 2.6.2 - Authenticated (Subscriber+) Privilege Escalation
Insert or Embed Articulate Content into WordPress <= 4.3000000025 - Authenticated (Editor+) Arbitrary File Upload
Accept SagePay Payments Using Contact Form 7 <= 2.0 - Unauthenticated Information Exposure
ts-asn1-der has Incorrect DER Encoding of Numbers Leading to Denial of Service and Incorrect Value Representation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.