Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Cross-site Scripting in FreeTAKServer-UI
XML External Entities Vulnerability in CVRF-CSAF-Converter
Insertion of Sensitive Information into Log File in ansible
saleor Missing Authorization vulnerability
open redirect in pollbot
Unrestricted Upload of File with Dangerous Type in motionEye
Open Redirect in CPython that affects users of OpenStack Nova
Open Redirect in django-spirit
Classic Buffer Overflow in pyo
Cross Site Request Forgery in mailman
APM Java Agent Local Privilege Escalation
calibre-web is vulnerable to Cross-Site Request Forgery (CSRF)
calibre-web is vulnerable to Cross-site Scripting
Information disclosure vulnerability in OnionShare
Temporary urls leaked via logging
Missing Authentication for Critical Function in Saleor
Cross-site scripting in Contentful
Moderate severity vulnerability that affects mailman
Memory leak in Nanopb
Moderate severity vulnerability that affects Zope2
Cookie Banner for GDPR / CCPA <= 4.3.5 - Authenticated (Administrator+) SQL Injection via 's' Parameter
AR for WordPress <= 8.40 - Unauthenticated Arbitrary File Read via 'file' Parameter
Reviews Widgets for Google, Yelp & TripAdvisor <= 2.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'page_id' Shortcode Attribute
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.