Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
WooCommerce <= 6.5.1 - Authenticated (Admin+) HTML Injection
Denial of Service in python-ldap
Send PDF for Contact Form 7 <= 0.9.1 - Multiple Cross-Site Scripting
got (JS Package) <= 11.8.4 and 12.0-<12.1.0 - Open Redirect
Uncontrolled Resource Consumption in fast-string-search
Uncontrolled Resource Consumption in @discordjs/opus
pg-native and libpq vulnerable to uncontrolled resource consumption
Prototype Pollution in mout
Out-of-bounds Read in fast-string-search
Prototype Pollution in querymen
Authentication bypass vulnerability in Apple Game Center auth adapter
XSS Vulnerability in Markdown Editor
brotkrueml/typo3-matomo-integration vulnerable to Cross-Site Scripting
brotkrueml/schema fails to properly encode user input for output in HTML context, leading to XSS
Memory Allocation with Excessive Size Value in OPCFoundation.NetStandard.Opc.Ua.Core
Uncontrolled Resource Consumption in OPCFoundation.NetStandard.Opc.Ua.Core
Incorrect Implementation of Authentication Algorithm in OPCFoundation.NetStandard.Opc.Ua.Core
Uncontrolled Resource Consumption in OPCFoundation.NetStandard.Opc.Ua.Core
Security Update for the OPC UA .NET Standard Stack
Potential Sensitive Cookie Exposure in NPM Packages @finastra/nestjs-proxy, @ffdc/nestjs-proxy
Potential Authorization Header Exposure in NPM Packages @finastra/nestjs-proxy, @ffdc/nestjs-proxy
Insufficient Session Expiration in TYPO3's Admin Tool
Cross-Site Scripting in TYPO3's Frontend Login Mailer
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.