Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Information Disclosure in Apache Tomcat
Code injection in keycloak
Prevent user enumeration using Guard or the new Authenticator-based Security
Use of "infinity" as an input to datetime and date fields causes infinite loop in pydantic
Hotscot Contact Form < 1.3 - SQL Injection
External Media <= 1.0.33 - Authenticated Arbitrary File Upload
Tradetracker-Store < 4.6.60 - Authenticated SQL Injection
drupal/ctools - SA-CONTRIB-2021-009
drupal/facets - SA-CONTRIB-2021-008
drupal/gutenberg - SA-CONTRIB-2021-007
Weekly Schedule <= 3.4.2 - Stored Cross-Site Scripting
Photo Gallery <= 1.5.66 - Authenticated Stored Cross-Site Scripting via Gallery Title
Cross-site scripting in jspdf
Denial of service attack via push rule patterns in matrix-synapse
Creation of Temporary File in Directory with Insecure Permissions in auto-generated Java, Scala code
Creation of Temporary File in Directory with Insecure Permissions in the OpenAPI-Generator online generator
Prototype Pollution in doc-path
Prototype pollution in json8-merge-patch
Prototype pollution in json8
Command injection in nodemailer
Regular expression deinal of service in express-validators
Prototype pollution in grpc and @grpc/grpc-js
Arbitrary Code Execution in json-ptr
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.