Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Memory exhaustion in http4s-async-http-client with large or malicious compressed responses
RCE in XWiki
Arbitrary Code Execution in blazar-dashboard
TI WooCommerce Wishlist <= 1.21.11 and TI WooCommerce Wishlist Pro <= 1.21.4 - Arbitrary Options Update
Comment Press <= 2.7.1 - Cross-Frame Scripting
Realia <= 1.4.0 - Arbitrary Post Deletion
drupal/oauth_server_sso - SA-CONTRIB-2020-034
Mailster <= 2.4.5.1 - Stored Cross-Site Scripting
Live Chat – Live support <= 3.1.0 - Cross-Site Request Forgery
Child Theme Creator by Orbisius <= 1.5.1 - Cross-Site Request Forgery to Arbitrary File Modification and Creation
Privilege Escalation in Channelmgnt plug-in for Sopel
Cross-site Scripting in Joplin
Brizy Page Builder <= 2.3.11 - Incorrect Authorization Checks Allowing Post Modification
TemporaryFolder on unix-like systems does not limit access to created files
Web Instant Messenger <= 1.1.2 and LocalWeb In One <= 1.6.4 - Stored Cross-Site Scripting
PowerPress <= 8.3.7 - Arbitrary File Upload
Autoptimize <= 2.7.7 - Race Condition leading to Remote Code Execution
Autoptimize <= 2.7.7 - Unsafe File Upload to Cross-Site Scripting
Autoptimize <= 2.7.7 - Arbitrary File Upload (and Remote Code Execution) via Import Settings
Sensitive data exposure in NATS
XSS vulnerability when listing users on add & modify server pages.
Cross-Site Scripting in ternary conditional operator
Open Redirect in Next.js versions
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.