Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Parse Server before v3.4.1 vulnerable to Denial of Service
Unauthorized File Access in harp
Unauthorized File Access in harp
Real Estate Manager – Property Listing and Agent Management <= 6.8 - Cross-Site Scripting
WP-Members <= 3.2.7 - Cross-Site Request Forgery
Command Injection in fs-path
Out-of-bounds Read in npmconf
SQL Injection in sql
Contest Gallery – Photo Contest Plugin for WordPress <= 10.4.4 - Cross-Site Request Forgery
Easy Digital Downloads – Simple eCommerce for Selling Digital Files <= 2.9.15 - Stored Cross-Site Scripting
Path Traversal in localhost-now
Remote Code Execution in node-os-utils
Path Traversal in m-server
Denial of Service in http-proxy-agent
Insert or Embed Articulate Content into WordPress < 4.2999 - Arbitrary File Upload
Support Board <= 1.2.8 - Authenticated Stored Cross-Site Scripting
Twisted CRLF Injection
Attendance Manager <= 0.5.6 - Stored Cross-Site Scripting
Revamp CRM for WooCommerce < 1.0.4 - Local File Inclusion
Online Lesson Booking <= 0.8.6 - Cross-Site Request Forgery
Attendance Manager <= 0.5.6 - Cross-site Request Forgery
Online Lesson Booking <= 0.8.6 - Cross-Site Scripting
Breadcrumbs by menu <= 1.0.1 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.