Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Cross-site Scripting in OWASP AntiSamy
Improper Handling of Length Parameter Inconsistency in Apache Ant
Improper Handling of Length Parameter Inconsistency in Apache Ant
Improper Handling of Length Parameter Inconsistency in Compress
Improper Handling of Length Parameter Inconsistency in Compress
Improper Handling of Length Parameter Inconsistency in Compress
Excessive Iteration in Compress
Buffer Overflow in Apache Mina SSHD
Improper Authentication in Apereo CAS
Incorrect Access Control in Nacos
VDZ Google Analytics or Google Tag Manager < 1.4.9 - Authenticated (Admin+) Stored Cross-Site Scripting
WP LMS – Best WordPress LMS Plugin <= 1.1.4 - Cross-Site Request Forgery
ShareThis Dashboard for Google Analytics <= 2.5.1 - Reflected Cross-Site Scripting via ga_action parameter
VDZ Google Analytics or Google Tag Manager / GTM <= 1.5.5 - Stored Cross-Site Scripting
Business Hours Indicator <= 2.3.4 - Authenticated Stored Cross-Site Scripting
Email Encoder <= 2.1.1 - Reflected Cross Site Scripting
Sitewide Notice WP <= 2.2 - Authenticated Stored Cross-Site Scripting
StoryChief <= 1.0.30 - Authenticated Stored Cross-Site Scripting
StoryChief <= 1.0.30 - Reflected Cross-Site Scripting
SMS Alert Order Notifications – WooCommerce <= 3.4.6 - Cross-Site Scripting
Bold Page Builder <= 3.1.5 - PHP Object Injection
Youtube Feeder <= 2.0.1 - Cross-Site Request Forgery
Nifty Newsletters <= 4.0.23 – Cross-Site Request Forgery to Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.