Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,616
undertow Race Condition vulnerability
VS Contact Form <= 11.5 - Reflected Cross-Site Scripting
Countdown, Coming Soon, Maintenance – Countdown & Clock <= 2.3.9.5 - Authenticated Cross-Site Scripting
Codup Read Only Admin <= 1.1.1.7 - Cross Site Scripting
Dropdown and scrollable Text <= 2.0 - Cross-Site Scripting
Wbcom Designs – BuddyPress Group Reviews <= 2.8.1 - Cross-Site Scripting
Direct Checkout for WooCommerce – Skip Cart with Buy Buttons <= 1.2 - Cross-Site Request Forgery to Settings Update
Easy PayPal Shopping Cart <= 1.1.9 - Cross-Site Request Forgery to Cross-Site Scripting
Subscriptions & Memberships for PayPal <= 1.1.5 - Reflected Cross-Site Scripting
Accept Donations with PayPal <= 1.3 - Reflected Cross-Site Scripting via Page
Easy PayPal Events <= 1.1.6 - Reflected Cross-Site Scripting via Page
WordPress to Freshsales Integration <= 1.3.2.2 - Cross-Site Scripting
Elements For Elementor <= 1.9 - Stored Cross-Site Scripting
Magento stored cross-site scripting vulnerability
Liferay Portal and Liferay DXP fails to invalidate password reset tokens after use
Apache Superset up to and including 0.38.0 allowed the creation of a Markdown component on a Dashboard page for describing chart's related information. Abusing this functionality, a malicious user cou
ChakraCore information disclosure vulnerability
Improper Certificate Validation in MongoDB
Moodle Persistent Cross-site Scripting (XSS)
Kibana Sensitive Data Disclosure
While investigating a bug report on Apache Superset, it was determined that an authenticated user could craft requests via a number of templated text fields in the product that would allow arbitrary a
Keycloak code execution via UMA policy abuse
Magento stored cross-site scripting vulnerability in the customer address upload feature
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.