Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
drupal/tb_megamenu - SA-CONTRIB-2021-040
drupal/tb_megamenu - SA-CONTRIB-2021-039
drupal/tb_megamenu - SA-CONTRIB-2021-038
drupal/domain_group - SA-CONTRIB-2021-037
drupal/miniorange_saml - SA-CONTRIB-2021-036
drupal/taxonomy_manager - SA-CONTRIB-2021-035
drupal/file_extractor - SA-CONTRIB-2021-033
drupal/commerce - SA-CONTRIB-2021-032
drupal/cshs - SA-CONTRIB-2021-031
drupal/user_hash - SA-CONTRIB-2021-030
Ninja Forms <= 3.5.7 - Unprotected REST-API to Email Injection
Ninja Forms <= 3.5.7 - Unprotected REST-API to Sensitive Information Disclosure
Improper Input Validation and Command Injection in Ansible
Easy Media Download <= 1.1.5 - Contributor+ Stored Cross-Site Scripting
WP User Manager <= 2.6.2 - Arbitrary User Password Reset
Cookie Bar <= 1.8.8 - Admin+ Stored Cross-Site Scripting
Video Player for YouTube <= 1.3 - Cross-Site Scripting
Improper Control of Generation of Code ('Code Injection') in @asyncapi/modelina
OS Command Injection in ssh2
Telefication <= 1.8.0 - Open Relay and Server-Side Request Forgery
Responsive WordPress Slider <= 2.2.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Video Gallery - Vimeo and YouTube Gallery < 1.1.5 - Stored Cross-Site Scripting
jQuery Reply to Comment <= 1.31 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.