Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
xterm vulnerable to remote code execution
Companion Auto Update <= 3.3.5 - Authenticated (Admin+) SQL Injection
Easy Redirect Manager <= 2.18.18 - Cross-Site Scripting
modulemd uses an unsafe function for processing externally provided data
Gallery Images Ape <= 1.6.14 - Stored Cross-Site Scripting
spam-byebye <= 2.2.1 - Unauthenticated Cross-Site Scripting
Companion Sitemap Generator – HTML & XML <= 3.6.6 - Cross-Site Request Forgery and Local File Inclusion
Improper Input Validation in Django
User Registration <= 1.5.5 - Cross-Site Scripting
MapSVG Lite < 3.3.0 - Cross-Site Request Forgery
Baggage Freight Shipping Australia <= 0.1.0 - Arbitrary File Upload
Improper Authentication in Apache Karaf
XML External Entity Reference in Apache Karaf
Moderate severity vulnerability that affects org.apache.karaf:apache-karaf
XML External Entity Reference in mchange:c3p0
rendertron XSS vulnerability
WP Job Manager <= 1.31.2 - PHP Object Injection via PHAR Deserialization
Ninja Forms Contact Form <= 3.3.21.1 - SQL Injection
JSmol2WP <= 1.07 - Cross-Site Scripting
Audio Record <= 1.0 - Arbitrary File Upload
Arbitrary Code Execution in jackson-databind
XML External Entity Reference (XXE) in jackson-databind
Server-Side Request Forgery (SSRF) in jackson-databind
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.