Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Store Toolkit for WooCommerce <= 2.3.1 - Reflected Cross-Site Scripting
markdown-it < 1.3.2 - Uncontrolled Resource Consumption
Cross-site Scripting in Apache Pluto
Cross-site Scripting in Apache Pluto
Cross-site Scripting in Apache Pluto
Cross-site Scripting in Scratch-Svg-Renderer
In Apache Kylin, Cross-origin requests with credentials are allowed to be sent from any origin.
Use of Hard-coded Credentials in Apache Kylin
Server-Side Request Forgery in Apache Kylin
SQL Injection in Apache Kylin
Kylin can receive user input and load any class through Class.forName(...).
Command Injection in Apache Kylin
Infinite Loop in Apache James
Command Injection in Apache James
Denial of Service in Apache James
Allocation of Resources Without Limits or Throttling in Apache Avro
Pac4j token validation bypass if OpenID Connect provider supports none algorithm
bookstack is vulnerable to Improper Access Control
Cross-site Scripting in DayByDay CRM
Missing Authorization in DayByDay CRM
Missing Authorization in DayByDay CRM
Weak Password Requirements in Daybyday CRM
Missing Authorization in DayByDay CRM
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.