Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,610
XSS in various backend modules due to (un)escaping in JS notification module
Missing Cryptographic Step in cassproject
`CHECK` failure in depthwise ops via overflows
JFinal file validation vulnerability
Drupal core - SA-CORE-2022-010
drupal/apigee_edge - SA-CONTRIB-2022-045
drupal/entity_browser_block - SA-CONTRIB-2022-044
drupal/embed - SA-CONTRIB-2022-042
Buffer over-flow in Pillow
** DISPUTED ** Improper parsing of HTTP requests in Pallets Werkzeug v2.1.0 and below allows attackers to perform HTTP Request Smuggling using a crafted HTTP request with multiple requests included in
SQL injection in helloxz/imgurl
Path Traversal in FileGator
Business Logic Errors in Para
Cross site scripting in SiteServer CMS
SQL injection in SiteServer CMS
Improper user session handling in filegator
Undertow Uncontrolled Resource Consumption
Wildfly-Core user account mismanagement
undertow Race Condition vulnerability
VS Contact Form <= 11.5 - Reflected Cross-Site Scripting
Countdown, Coming Soon, Maintenance – Countdown & Clock <= 2.3.9.5 - Authenticated Cross-Site Scripting
Codup Read Only Admin <= 1.1.1.7 - Cross Site Scripting
Dropdown and scrollable Text <= 2.0 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.