Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,415
MindsDB Cross-site Scripting vulnerability
Refuel Autolab Eval Injection vulnerability
Refuel Autolab Eval Injection vulnerability
Timing-Based Username Enumeration Vulnerability in Fides Webserver Authentication
D-Tale vulnerable to Remote Code Execution through the Query input on Chart Builder
Remote Code Execution Vulnerability via SSTI in Fides Webserver Jinja Email Templating Engine
Ansible vulnerable to Insertion of Sensitive Information into Log File
FastAPI Admin cross-site scripting (XSS) vulnerability in the Create Product function
FastAPI Admin Cross-site Scripting vulnerability in the Config-Create function
CKAN may leak Solr credentials via error message in package_search action
CKAN has Cross-site Scripting vector in the Datatables view plugin
Potential access to sensitive URLs via CKAN extensions (SSRF)
Mage AI incorrectly gives privileges to users with deleted accounts
Mage AI Path Traversal vulnerability
Mage AI Path Traversal vulnerability
Mage AI allows remote unauthenticated attackers to leak the terminal server command history of arbitrary users
Khoj Vulnerable to Stored Cross-site Scripting In Automate (Preview feature)
Mage AI Path Traversal vulnerability
Pulp incorrectly assigns RBAC permissions in tasks that create objects
PheonixAppAPI has visible Encoding Maps
Insecure Jinja2 templates rendered in Haystack Components can lead to RCE
openstack-heat may disclose sensitive information
MobSF vulnerable to Open Redirect in Login Redirect
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.