Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Rencontre – Dating Site <= 3.2.1 - Authenticated (Admin+) SQL Injection
Improper Input Validation in Apache Qpid Broker-J
Unauthenticated Remote Code Execution in Apache JMeter
drupal/eu_cookie_compliance - SA-CONTRIB-2019-033
Stack Overflow in Apache Mesos
Incomplete List of Disallowed Inputs in SOFA-Hessian
Moderate severity vulnerability that affects org.b3log:symphony
uap-core Regular Expression Denial of Service issue
Quiz And Survey Master <= 6.2.1 - Cross-Site Scripting
Smash Balloon Social Photo Feed <= 1.11.3 - Cross-Site Request Forgery to Back-Up Deletion
The Events Calendar <= 4.8.1 - Cross-Site Scripting via tribe_paged Parameter
Kunena - XSS (Cross Site Scripting)
Smart Forms < 2.6.26 - Cross-Site Request Forgery
Apache Airflow vulnerable to Stored XSS
drupal/facets - SA-CONTRIB-2019-030
FormCraft <= 1.2.1 - Cross-Site Request Forgery
FormCraft <= 1.2.1 - Cross-Site Request Forgery
Indeed Membership Pro <= 7.5 - Arbitrary File Upload
Indeed Membership Pro <= 7.5 - Remote Image File Inclusion
Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update
WP Human Resource Management Plugin < 2.2.6 - Authorization Bypass
LoginWP <= 2.9.1 - Multiple Cross-Site Request Forgery vulnerabilities
Edocman - SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.