Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Invalid URL generation in bitlyshortener
Improper Restriction of XML External Entity Reference in skylot/jadx
Cross-site Scripting in pimcore
Cross-site Scripting in microweber
Exposure of Sensitive Information to an Unauthorized Actor in microweber
Microweber Incorrect Permission Assignment for Critical Resource vulnerability
Code Injection in microweber
Super Forms - Drag & Drop Form Builder WordPress <= 6.0.3 - Reflected Cross-Site Scripting
Essential Addons for Elementor <= 5.0.4 - Local File Inclusion
Improper Privilege Management in apache-airflow
android-gif-drawable vulerable to denial of service due to unrestricted comment length
Improper Handling of Insufficient Permissions or Privileges in MySQL Connectors Java
WordPress Download Manager <= 3.2.33 - Authenticated SQL Injection
Execution with Unnecessary Privileges in ipython
Drupal core - SA-CORE-2022-001
drupal/jquery_ui_datepicker - SA-CONTRIB-2022-004
Deserialization of Untrusted Data in Apache Log4j
AnyComment <= 0.2.17 - Cross-Site Request Forgery
WOOCS <= 1.3.7.4 - Reflected Cross-Site Scripting via AJAX action
AnyComment <= 0.2.17 - Race Condition
Shield Security <= 13.0.5 - Admin+ Stored Cross-Site Scripting
Support Board <= 3.4.1 - Authenticated SQL Injection
WP HTML Mail <= 3.0.9 - Missing Authorization on Rest Route
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.