Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 21
Reset filtersFUXA has SQL Injection in its TDengine DAQ connector via backslash bypass of escapeTdString
FUXA: Unauthenticated SSRF via Socket.IO DEVICE_WEBAPI_REQUEST and DEVICE_PROPERTY with response reading
FUXA provides guest and invalid-token access to protected read APIs in secure mode
FUXA's Unauthenticated Project Data Disclosure Exposes Server-Side Scripts and Device Configurations
FUXA Vulnerable to Unauthenticated Remote Code Execution via Script Test Mode Authorization Bypass
FUXA has an unauthenticated arbitrary tag value disclosure via /api/getTagValue
FUXA Affected by a Path Traversal Sanitization Bypass
FUXA Unauthenticated Remote Arbitrary Scheduler Write
FUXA Unauthenticated Remote Code Execution in Node-RED Integration
FUXA Unauthenticated Remote Arbitrary Device Tag Write
FUXA Unauthenticated Remote Code Execution via Arbitrary File Write in Upload API
FUXA Unauthenticated Remote Code Execution via Hardcoded JWT Secret in Default Configuration
FUXA Unauthenticated Exposure of Plaintext Database Credentials
FUXA Unauthenticated Remote Code Execution via Admin JWT Minting
FUXA allows Remote Code Execution (RCE) via the project import functionality.
FUXA contains an Unrestricted File Upload vulnerability
FUXA contains an insecure default configuration vulnerability
FUXA SQL Injection vulnerability
FUXA local file inclusion vulnerability
FUXA SQL Injection vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.