Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Apache Airflow, versions prior to 2.7.2, contains a security vulnerability that allows authenticated users of Airflow to list warnings for all DAGs, even if the user had no permission to see those DAG
Apache Airflow, versions 2.7.0 and 2.7.1, is affected by a vulnerability that allows an authenticated user to retrieve sensitive configuration information when the "expose_config" option is set to "no
node-qpdf vulnerable to command injection
Cross-site Scripting (XSS) in froxlor/froxlor
Allocation of Resources Without Limits or Throttling in vriteio/vrite
Server-Side Request Forgery (SSRF) in vriteio/vrite
Improper Input Validation in vriteio/vrite
Magento Open Source allows Uncontrolled Resource Consumption
Magento Open Source allows SQL Injection
Magento Open Source allows SQL Injection
Magento Open Source allows SQL Injection
Magento Open Source allows Improper Authorization
Magento Open Source allows Cross-Site Scripting (XSS)
Magento Open Source allows Incorrect Authorization
Magento Open Source has Improper Input Validation Vulnerability
Magento Open Source allows Server-Side Request Forgery (SSRF)
Cross-site Scripting (XSS) in froxlor/froxlor
LeadSquared Suite <= 0.7.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
WP GoToWebinar <= 14.45 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
RumbleTalk Live Group Chat <= 6.1.9 - Missing Authorization via handleRequest
Newsletter & Bulk Email Sender <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Libsyn Publisher Hub <= 1.4.4 - Sensitive Information Exposure
Libsyn Publisher Hub <= 1.4.4 - Unauthenticated Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.