Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Server-Side Request Forgery in terriajs-server
Out-of-bounds Read in concat-with-sourcemaps
Access control bypass in Apache ZooKeeper
Cross-Site Scripting in shave
XML External Entity injection in Apache Camel
Path Traversal in DKPro Core
Command Injection in Xstream
Cross-site Scripting in remarkable
Denial of Service in axios
Cross-Site Scripting (XSS) in Verdaccio
Finale WooCommerce Sale Countdown <= 2.9.0 - Authenticated Arbitrary File Upload
ConvertPlug <= 3.4.2 - Unauthenticated Administrator Creation
Slick Popup <= 1.7.1 - Privilege Escalation
SAML Single Sign On – SAML SSO Login < 4.8.73 - Cross-Site Scripting
Affiliates Manager <= 2.6.5 - Cross-Site Request Forgery
Hostel <= 1.1.3 - Stored Cross-Site Scripting
Related YouTube Videos <= 1.9.8 - Cross-site Request Forgery
Hustle <= 6.0.7 - Unauthenticated CSV Injection
Improper Authentication in Buildbot
Information exposure in FasterXML jackson-databind
Cryptographically Weak PRNG in generate-password
mysql Node.JS Module Vulnerable to Remote Memory Exposure
Cross-Site Scripting in webpack-bundle-analyzer
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.