Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Cross-site Scripting in GilaCMS
SQL Injection in topthink/thinkphp
Inefficient Regular Expression Complexity in handsontable
LiveQuery publishes user session tokens in parse-server
Cross-site Scripting in shuup
JS Job Manager < 1.1.9 - Arbitrary Plugin Installation/Activation
Improper Access Control in passport-oauth2
Improper Access Control in Webauthn Framework
Regular Expression Denial of Service in jsoneditor
Reliance on Cookies without Validation and Integrity Checking in getgrav/grav
Cross-Site Request Forgery in firefly-iii
inflect vulnerable to Inefficient Regular Expression Complexity
Cross site scripting in datatables.net
File reference keys leads to incorrect hashes on HMAC algorithms
User can obtain JWT token even if account is disabled
Credova_Financial <= 1.4.8 - Sensitive Information Disclosure
drupal/linkit - SA-CONTRIB-2021-042
CSV injection in shuup
Stylish Price List < 6.9.0 - Arbitrary Image Upload
WPeMatico RSS Feed Fetcher <= 2.6.11 - Admin+ Stored Cross-Site Scripting
Stylish Price List <= 6.9.0 - Missing Authorization
Modern Events Calendar Lite <= 5.22.2 - Authenticated Stored Cross Site Scripting
WordPress Download Manager <= 3.2.15 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.