Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Call Now Button <= 1.5.3 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Settings Update
PrivateBin is missing HTML sanitization of attached filename in file size hint
CodeChecker has a buffer overflow in the log command
InventoryGui allows item duplication in GUIs which use GuiStorageElement
Astro's bypass of image proxy domain validation leads to SSRF and potential XSS
Anti-Malware Security and Brute-Force Firewall <= 4.23.81 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read
Keycloak vulnerable to session takeovers due to reuse of session identifiers
ImageMagick has Integer Overflow in BMP Decoder (ReadBMP)
Liferay Portal Vulnerable to DoS via Crafted Headless API Request
Liferay Portal Vulnerable to CSRF in Headless APIs
Liferay Portal Does Not Limit Access to APIs Before Email Verification
Liferay Portal Stores Password Reset Tokens in Plain Text
Easy Testimonial Slider and Form <= 1.0.2 - Authenticated (Admin+) SQL injection
Polylang <= 3.7.3 - Authenticated (Contributor+) PHP Object Injection
Elastic Email Sender <= 1.2.20 - Missing Authorization
Яндекс Доставка (Boxberry) <= 2.32 - Missing Authorization
Contact Form 7 PDF, Google Sheet & Database <= 3.0.0 - Authenticated (Subscriber+) Arbitrary File Upload
IDonate < 2.1.13 - Missing Authorization
User Toolkit <= 1.2.3 - Unauthenticated Privilege Escalation
LiteSpeed Cache <= 7.5.0.1 - Reflected Cross-Site Scripting
Thumbnail Slider With Lightbox <= 1.0.4 - Authenticated (Admin+) SQL Injection
Soledad <= 8.7.0 - Authenticated (Contributor+) Local File Inclusion
ImageMagick CLAHE : Unsigned underflow and division-by-zero lead to OOB pointer arithmetic and process crash (DoS)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.