Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Apache Linkis Authentication Bypass vulnerability
HtmlUnit Code Injection vulnerability
Jenkins AbsInt a³ Plugin XML External Entity Reference vulnerability
Magento Open Source allows Cross-Site Scripting (XSS)
Artesãos SEOTools Open Redirect vulnerability
Artesãos SEOTools Open Redirect vulnerability
Artesãos SEOTools Open Redirect vulnerability
Apache Zeppelin Improper Input Validation vulnerability
is_js vulnerable to Regular Expression Denial of Service
Concrete CMS Cross-site Scripting vulnerability
snyk Code Injection vulnerability
Apache Kylin vulnerable to remote code execution
SQLFluff users with access to config file, using `libary_path` may call arbitrary python code
@vendure/admin-ui-plugin authenticated Cross-site Scripting vulnerability
SQL injection vulnerability in langchain v.0.0.64 allows a remote attacker to obtain sensitive information via the SQLDatabaseChain component.
langchain vulnerable to arbitrary code execution
FluentSMTP <= 2.2.4 - Unauthenticated Stored Cross-Site Scripting via Email Subject
LearnPress <= 4.2.3 - Missing Authorization
Improper neutralization of a SQL parameter in KerAwen Omnichannel Stocks module for PrestaShop
Connect-CMS Privilege Escalation Vulnerability
ethyca-fides Webserver API Path Traversal vulnerability
@fastify/oauth2 vulnerable to Cross Site Request Forgery due to reused Oauth2 state
MechanicalSoup vulnerable to malicious web server reading arbitrary files on client using file input inside HTML form
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.