Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
SpEL Injection in Spring Data MongoDB
Invalid order neutralization in an SQL query in PrestaShop blockwishlist module
Improper handling of CSS at-rules in lettersanitizer
Salt's PAM auth fails to reject locked accounts
Denial of Service (DoS) vulnerability in RSSHub
Cross-site Scripting in Microweber
Log Injection in Apache Sling Commons Log and Apache Sling API
Server-Side Request Forgery in Directus
OAuth 2.0 client for SSO <= 1.11.3 - Authentication Bypass
WordPress OpenID Connect Client <= 2.1.7 - Authentication Bypass
Download Manager <= 3.2.43 - Reflected Cross-Site Scripting
Loading Page with Loading Screen <= 1.0.82 - Cross-Site Scripting
Login with WHMCS <= 1.11.3 - Authentication Bypass
Improper quoting of columns when using setOrderBy() or setGroupBy() on listing classes in Pimcore
Authenticated Stored Cross-site Scripting in Shopware
Improper Handling of Exceptional Conditions in Newtonsoft.Json
Cross-site Scripting in NukeViet CMS
Denial of Service in Spring Cloud Function
Cross-site Scripting in krayin/laravel-crm
Dropshipping and affiliates for Amazon and woocommerce <= 1.4.3 - Missing Authorization
Our Services Showcase <= 2.0 - Missing Authorization
Free Live Chat Support <= 1.0.11 - Cross-Site Request Forgery to Cross-Site Scripting
Football Live Scores <= 1.5 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.