Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
PeoplePond <= 1.1.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
ImageMagick Engine <= 1.7.10 - Authenticated (Administrator+) Remote Code Execution
LatePoint <= 5.0.11 - Unauthenticated Arbitrary User Password Change via SQL Injection
Simple Nav Archives <= 2.1.3 - Cross-Site Request Forgery to Settings Update
Backup Database <= 4.9 - Authenticated (Admin+) Stored Cross-Site Scripting
Reverb use after free vulnerability
DOM Clobbering Gadget found in Rspack's AutoPublicPathRuntimeModule that leads to XSS
protobuf-java has potential Denial of Service issue
Gematik Referenzvalidator has an XXE vulnerability that can lead to a Server Side Request Forgery attack
SOFA Hessian Remote Command Execution (RCE) Vulnerability
LangChain Experimental Eval Injection vulnerability
TI WooCommerce Wishlist <= 2.9.0 - Unauthenticated SQL Injection via 'lang'
Mautic allows users enumeration due to weak password login
Mautic has insufficient authentication in upgrade flow
Mautic has an XSS in contact tracking and page hits report
Mautic vulnerable to XSS in contact/company tracking (no authentication)
Mautic vulnerable to Cross-site Scripting (XSS) - stored (edit form HTML field)
Mautic vulnerable to Improper Access Control in UI upgrade process
Directus vulnerable to SSRF Loopback IP filter bypass
find-my-way has a ReDoS vulnerability in multiparametric routes
WP Custom Fields Search <= 1.2.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpcfs-preset Shortcode
org.xwiki.platform:xwiki-platform-notifications-ui leaks data of notification filters of users
org.xwiki.platform:xwiki-platform-notifications-ui is missing checks for notification filter preferences editions
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.