Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
@dependencytrack/frontend vulnerable to Persistent Cross-Site-Scripting via Vulnerability Details
Azure CLI is the command-line interface for Microsoft Azure. In versions previous to 2.40.0, Azure CLI contains a vulnerability for potential code injection. Critical scenarios are where a hosting mac
Untrusted code execution in Apache XML Graphics Batik
Apache XML Graphics Batik vulnerable to code execution via SVG.
Apache Geode vulnerable to Cross-Site Scripting
.NET Core Elevation of Privilege Vulnerability
SEO Redirection Plugin <= 8.9 - Cross-Site Request Forgery
WPQA < 5.9 - Cross-Site Request Forgery
SEO Plugin by Squirrly SEO <= 12.1.10 - Authenticated (Contributor+) Arbitrary File Upload
Advanced Dynamic Pricing for WooCommerce <= 4.1.5 - Missing Authorization
Image Hover Effects Ultimate <= 9.7.1 - Authenticated (Admin+) Arbitrary Options Update
Heron allows CRLF log injection
Traffic Manager <= 1.4.5 - Missing Authorization to Stored Cross-Site Scripting
Advanced Floating Content <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Phone Orders for WooCommerce <= 3.7.1 - Missing Authorization
tagDiv Composer < 3.5 - Unauthorized Account Access and Privilege Escalation
Corona Virus (COVID-19) Banner & Live Data <= 1.7.0.6 - Cross-Site Request Forgery
Related Posts for WordPress <= 2.1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Auto Upload Images <= 3.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Auto Upload Images <= 3.3 - Cross-Site Request Forgery
WIP Custom Login <= 1.2.7 - Missing Authorization
Traffic Manager <= 1.4.5 - Missing Authorization
IP Blacklist Cloud <= 5.00 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.