Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Rencontre – Dating Site <= 3.1.3 - Authenticated (Admin+) Stored Cross-Site Scripting
WordPress CRM, Email & Marketing Automation for WordPress | Award Winner — Groundhogg < 1.3.5 - Remote Code Execution
Jinja2 sandbox escape via string formatting
Moderate severity vulnerability that affects roundup
Form Maker by 10Web <= 1.13.4 - Cross-Site Request Forgery to Local File Inclusion
Contact Form by WD <= 1.13.4 - Cross-Site Request Forgery
Jupyter Notebook open redirect vulnerability
CoAPthon DoS due to Exceptions
CoAPthon3 vulnerable to Deserialization of Untrusted Data
Improper Authorization in org.apache.hbase:hbase
Open Redirect vulnerability in jupyterhub and notebook
Moderate severity vulnerability that affects total.js
Moderate severity vulnerability that affects org.apache.jspwiki:jspwiki-main
Improper Control of Generation of Code ('Code Injection') in org.apache.activemq:activemq-client
Improper Input Validation in net.sf.robocode:robocode.host allows for external service interaction
Ultimate Member <= 2.0.39 - Cross-Site Request Forgery
article2pdf <= 0.27 - Denial of Service
Pipdig Power Pack (P3) <= 4.7.3 - Backdoor
Uncontrolled Resource Consumption in org.eclipse.jetty:jetty-server
Stops Core Theme And Plugin Updates <= 8.0.4 - Insufficient Restrictions on Option Changes
Ansible Path Traversal vulnerability
Social Media Share Buttons & Social Sharing Icons <= 2.1.7 - Reflected Cross-Site Scripting
Google Adsense & Banner Ads by AdsforWP < 1.6 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.