Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Farm Agrico <= 1.3.11 - Unauthenticated Local File Inclusion
Gardis <= 1.2.13 - Unauthenticated Local File Inclusion
Exit Game <= 1.4.3 - Unauthenticated Local File Inclusion
ITok <= 1.1.42 - Unauthenticated Local File Inclusion
Emberlyn <= 1.3.1 - Unauthenticated Local File Inclusion
The Hospital <= 1.8.1 - Unauthenticated PHP Object Injection
EasyEat <= 1.9.0 - Unauthenticated Local File Inclusion
Femme <= 1.3.11 - Unauthenticated Local File Inclusion
Zuut <= 1.4.2 - Unauthenticated PHP Object Injection
Echo <= 1.15.0 - Unauthenticated Local File Inclusion
GlamChic <= 1.0.11 - Unauthenticated Local File Inclusion
Quick Paypal Payments <= 5.7.46 - Cross-Site Request Forgery
Faith & Hope <= 2.13.0 - Unauthenticated Local File Inclusion
DeepDiff Class Pollution in Delta class leading to DoS, Remote Code Execution, and more
Mautic Vulnerable to User Enumeration via Response Timing
Mautic vulnerable to reflected XSS in lead:addLeadTags - Quick Add
Mautic vulnerable to secret data extraction via elfinder
Mautic vulnerable to SSRF via webhook function
Hono's flaw in URL path parsing could cause path confusion
Electron has ASAR Integrity Bypass via resource modification
Django is subject to SQL injection through its column aliases
Make Connector <= 1.5.10 - Authenticated (Administrator+) Arbitrary File Upload
PopAd <= 1.0.4 - Cross-Site Request Forgery to Settings Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.