Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Cross-site scripting in Dolibarr
Missing Initialization of Resource in Apache Arrow
Default Express middleware security check is ignored in production
Potential DOS attack due to unrestricted attachment count in messages
Potential session hijack in Apache CXF
SQL Injection in sequelize
Cross-site Scripting in Bolt
Improper Verification of Cryptographic Signature in matrix-synapse
Safe SVG <= 1.9.5 - Cross-Site Scripting
Funnel Builder <= 1.3.0 - Arbitrary Plugin Activation
SQL Injection in sequelize
Use of Cryptographically Weak Pseudo-Random Number Generator in org.pac4j:pac4j-saml
Improper Authentication in pip
Safe SVG <= 1.9.4 - Denial of Service
Tidio Live Chat < 4.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Safe SVG <= 1.9.4 - Denial of Service
Currency Switcher <= 2.11.1 - Authorization Bypass
python-docutils allows insecure usage of temporary files
Cross-site scripting in Jupyter Notebook
YIT Plugin Framework <= 3.3.8 - Authenticated Settings Change
GiveWP <= 2.5.9 - Missing Authorization to Settings Update
Polymorphic Typing in FasterXML jackson-databind
Incorrect Default Permissions in keyring
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.