Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Out-of-bounds reads in Pillow
Out-of-bounds reads in Pillow
Page Builder: KingComposer – Free Drag and Drop page builder by King-Theme <= 2.9.4 - Reflected Cross-Site Scripting
Coming Soon Page by SeedProd <= 5.1.1 - Authenticated Stored Cross-Site Scripting
Directory traversal outside of SENDFILE_ROOT in django-sendfile2
Timing attack on django-basic-auth-ip-whitelist
Traveler – Travel Booking WordPress Theme < 2.8.4 - Cross-Site Scripting
Travel Booking WordPress Theme < 2.8.4 - SQL Injection
Command Injection in Limdu
Regular expression denial of service in url-regex
WooCommerce <= 4.2.0 - Reflected Cross-Site Scripting
YITH WooCommerce Ajax Product Filter <= 3.11.0 - Cross-Site Scripting
WP-Pro-Quiz <= 0.37 - Arbitrary Quiz Deletion via Cross-Site Request Forgery
Deserialization of Untrusted Data in Tendenci
Advanced Popups <= 1.1.1 - Cross-Site Request Forgery Bypass
Reality | Estate Multipurpose WordPress Theme <= 2.5.3 - Reflected Cross-Site Scripting
Reality | Estate Multipurpose WordPress Theme <= 2.5.5 - Reflected Cross-Site Scripting
TownHub <= 1.2.9 - Reflected Cross-Site Scripting
Command injection in mversion
Deserialization of untrusted data in Jackson Databind
Deserialization of untrusted data in Jackson Databind
Deserialization of untrusted data in Jackson Databind
Deserialization of untrusted data in Jackson Databind
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.