Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
All-in-One WP Migration <= 6.97 - Authenticated Stored Cross-Site Scripting
System.Management.Automation subject to bypass via script debugging
Drupal core - SA-CORE-2019-008
Deserialization of untrusted data in FasterXML jackson-databind
Pallets Project Flask is vulnerable to Denial of Service via Unexpected memory usage
Coming Soon Page & Maintenance Mode <= 1.8.1 - Unauthenticated Settings Reset
Deserialization of Untrusted Data in jackson-databind
Cross-Site Scripting in @nuxt/devalue
Path Traversal in http-file-server
python-engineio vulnerable to Cross-Site Request Forgery (CSRF)
WordPress Ultra Simple Paypal Shopping Cart <= 4.4 - Cross-Site Request Forgery
Web Librarian <= 3.5.4 - SQL Injection
Coming Soon Page & Maintenance Mode <= 1.8.1 - Stored Cross Site Scripting
XML Injection in python-libnmap
Ad Inserter <= 2.4.21 - Authenticated Remote Code Execution
School Management System for Wordpress <= 56.0 - Cross-Site Request Forgery
WP Code Highlight.js <= 0.6.3 - Cross-Site Scripting
Email Subscribers & Newsletters <= 4.1.6 - Cross-Site Scripting
Ad Inserter <= 2.4.19 - Authenticated Path Traversal
Sensitive Data Exposure in parse-server
LoginPress | Custom Login Page Customizer <= 1.1.13 - Unauthorized Settings Update
AdRotate – Ad manager & AdSense Ads <= 5.2 - Authenticated SQL Injection
One Click SSL <= 1.4.6 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.