Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,529
Apache StreamPark: Authenticated system users could trigger SQL injection vulnerability
Multiple WSO2 products vulnerable to perform user impersonatoin using JIT provisioning
WSO2 API Manager allows attackers to change the API rating
WSO2 products vulnerable to XML External Entity attack
Bypass serialize checks in Apache Dubbo
Apache Dubbo: Bypass deny serialize list check in Apache Dubbo
Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2.
Business Logic Errors in microweber/microweber
Cross-site Scripting in @spscommerce/ds-react
Named path parameters can be overridden in TrieRouter
GTG Product Feed for Shopping <= 1.2.4 - Missing Authorization to Unauthenticated Plugin Settings Update
Duplicator < 1.3.0 - Unauthenticated Remote Code Execution
Post Grid Combo – 36+ Gutenberg Blocks <= 2.2.64 - Authenticated (Contributor+) Cross-Site Scripting
Slick Social Share Buttons <= 2.4.11 - Authenticated (Subscriber+) Arbitrary Option Update
MW WP Form <= 5.0.3 - Improper Limitation of File Name to Unauthenticated Arbitrary File Deletion
Email Subscription Popup <= 1.2.19 - Reflected Cross-Site Scripting
Getwid – Gutenberg Blocks <= 2.0.2 - Improper Input Validation to Arbitrary Email Sending to Admin
Allocation of Resources Without Limits in Keycloak
Cross-site Scripting in JFinalcms
Cross-site Scripting in JFinalcms
Cross-site Scripting in JFinalcms
Cross-site Scripting in JFinalcms
External Control of File Name or Path in h2oai/h2o-3
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.