Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Frontend Uploader <= 1.3.2 - Unauthenticated Stored Cross-Site Scripting
St Daily Tip <= 4.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Game Server Status <= 1.0 - Authenticated (Admin+) SQL Injection
WP DSGVO Tools (GDPR) <= 3.1.23 - Unauthenticated Arbitrary Post Deletion
Request a Quote <= 2.3.4 - Stored Cross-Site Scripting
WP HTML Author Bio <= 1.2.0 - Authenticated (Author+) Stored Cross-Site Scripting
Exposure of Sensitive Information to an Unauthorized Actor in Apache Santuario
Apprise vulnerable to regex injection with IFTTT Plugin
Inefficient Regular Expression Complexity in nth-check
Prototype Pollution in object-path
Infinite loop in Tomcat due to parsing error
Arbitrary Code Execution in feehi/cms
Server-Side Request Forgery in UReport
Remote code execution in UReport
prismjs Regular Expression Denial of Service vulnerability
Exposure of Sensitive Information in keycloak
Cross-site Scripting in yourls
Cross-site Scripting in yourls
Cross-site Scripting in peertube
semver-regex Regular Expression Denial of Service (ReDOS)
Inefficient Regular Expression Complexity in vuelidate
Exposure of sensitive information in Elasticsearch
tmpl vulnerable to Inefficient Regular Expression Complexity which may lead to resource exhaustion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.