Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Directus vulnerable to unhandled exception on illegal filename_disk value
.NET Denial of Service Vulnerability
.NET Denial of Service Vulnerability
snipe-it vulnerable to cross-site scripting (XSS)
oauth2-server through 3.1.1 vulnerable to Open Redirect
Add User Role <= 0.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
WordPress Core < 6.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via use of the_meta(); function
WordPress Core < 6.0.2 - Stored Cross-Site Scripting via Plugin Deactivation and Deletion Errors
WordPress Core < 6.0.2 - Authenticated SQL Injection
morgan-json vulnerable to Arbitrary Code Execution
@pendo324/get-process-by-name are vulnerable to Arbitrary Code Execution
Pagekit CMS cross-site scripting in Markdown text box where articles are edited
Font-Converter Vulnerable to Arbitrary Command Injection
Subrion CMS 4.2.1 vulnerable to cross-site scripting in admin panel
Cross-site scripting from dynamic options in the multiselect field
python-oslo-utils has improper password parsing
NVFLARE unsafe deserialization due to Pickle
Froxlor vulnerable to Cross-Site Request Forgery (CSRF)
Zephyr Project Manager <= 3.2.42 - Unauthenticated SQL Injection
Beaver Builder – WordPress Page Builder <= 2.5.5.2 - Authenticated Stored Cross-Site Scripting via 'caption'
WPvivid Backup 0.9.76 - Authenticated (Administrator+) Arbitrary File Deletion
Site Offline <= 1.4.9 - Maintenance Mode Bypass
Slickr Flickr <= 2.8.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.