Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Validation bypass in frourio
Cookie and header exposure in twisted
Abort caused by allocating a vector that is too large in Tensorflow
`CHECK`-failures during Grappler's `IsSimplifiableReshape` in Tensorflow
Cross-site Scripting in LiveHelperChat
Catch Themes Demo Import <= 2.1 - Authenticated (Admin+) Arbitrary File Upload
WP-Matomo Integration (WP-Piwik) <= 1.0.26 - Cross-Site Request Forgery
Multisite Content Copier/Updater <= 1.4.0 - Reflected Cross-Site Scripting
AdRotate – Ad manager & AdSense Ads <= 5.8.17 - Admin+ SQL Injection
All-in-One WP Migration <= 7.40 - Authenticated (Admin+) Arbitrary File Upload
RegistrationMagic <= 5.0.2.1 - SQL Injection
WordPress Multisite User Sync/Unsync (Premium) <= 2.1.1 Reflected Cross-Site Scripting
TaxoPress <= 3.4.4 - Reflected Cross-Site Scripting
IP2Location Country Blocker < 2.26.9 - Authenticated Stored Cross-Site Scripting
WordPress Real Cookie Banner: GDPR (DSGVO) & ePrivacy Cookie Consent < 2.14.2 - Cross-Site Request Forgery
White Label MS <= 2.2.8 - Reflected Cross-Site Scripting
Apache Gobblin trusts all certificates used for LDAP connections in Gobblin-as-a-Service
Hadoop token in temp file visible to all users in Apache Gobblin
Unrestricted Upload of File with Dangerous Type in jsdecena/laracom
Business Logic Errors in SilverStripe Framework
Apache ActiveMQ Artemis Uncontrolled Resource Consumption (DoS)
Cross-site Scripting in karma
Cross-site Scripting in Beanstalk console
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.