Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
ImageMagick has a NULL pointer dereference in MSL parser via <comment> tag before image load
ImageMagick has a Memory Leak in LoadOpenCLDeviceBenchmark() when parsing malformed XML
Race Condition in node-tar Path Reservations via Unicode Ligature Collisions on macOS APFS
ImageMagick MSL: Stack overflow via infinite recursion in ProcessMSLScript
Orval has a code injection via unsanitized x-enum-descriptions in enum generation
Claude Code Leaks Data via Malicious Environment Configuration Before Trust Confirmation
Listivo Core <= 2.3.77 - Unauthenticated Local File Inclusion
Salon booking system <= 10.30.3 - Authenticated (Subscriber+) Information Exposure
EcoBlue <= 1.15 - Unauthenticated Local File Inclusion
Real Homes CRM <= 1.0.0 - Authenticated (Subscriber+) Arbitrary File Upload
TaxCloud for WooCommerce <= 8.3.8 - Missing Authorization
Dinatur <= 1.18 - Unauthenticated Stored Cross-Site Scripting
Edwiser Bridge <= 4.3.2 - Missing Authorization
WPO365 <= 40.0 - Authenticated (Subscriber+) Server-Side Request Forgery
Anything Order by Terms <= 1.4.0 - Missing Authorization
Media Library File Size <= 1.6.7 - Missing Authorization
Movie Booking <= 1.1.5 - Unauthenticated Arbitrary File Deletion
Ultra Portfolio <= 6.7 - Authenticated (Subscriber+) SQL Injection
Hydra Booking <= 1.1.32 - Unauthenticated Privilege Escalation
Paid Downloads <= 3.15 - Unauthenticated SQL Injection
Lawyer Directory <= 1.3.3 - Authenticated (Subscriber+) Privilege Escalation
WorkScout-Core <= 1.7.06 - Unauthenticated Stored Cross-Site Scripting
Beaver Builder <= 2.9.4.1 - Authenticated (Contributor+) Remote Code Execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.