Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Migration, Backup, Staging – WPvivid <= 0.9.69 - Reflected Cross-Site Scripting via sub_page Parameter
Salon Booking System and Salon Booking System Pro <= 7.6.2 - Sensitive Information Disclosure
Easy Social Icons <= 3.2.0 - Admin+ Stored Cross-Site Scripting
Salon Booking System and Salon Booking System Pro <= 7.6.2 - Sensitive Data Disclosure
Ultimate Member <= 2.3.2 - Stored Cross-Site Scripting
Advanced Booking Calendar <= 1.7.0 - Reflected Cross-Site Scripting
Export All URLs <= 4.2 - Cross-Site Request Forgery to Sensitive Data Export
Image optimization & Lazy Load <= 3.3.1 - Admin+ Stored Cross-Site Scripting
Export All URLs <= 4.1 - Reflected Cross-Site Scripting
Podcast Importer SecondLine < 1.3.8 - SQL Injection
Favicon by RealFaviconGenerator <= 1.3.22 - Reflected Cross-Site Scripting
Remote Code Execution in Contao Managed Edition
Insufficient Session Expiration in Admidio
Improper Privilege Management in Open Web Analytics
Stored Cross-site Scripting in folder-auth plugin
Possibility for Denial of Service by overwriting PHP files with language exports
`gradio` is an open source framework for building interactive machine learning models and demos. Prior to version 2.8.11, `gradio` suffers from Improper Neutralization of Formula Elements in a CSV Fil
Improper Verification of Cryptographic Signature in `node-forge`
Improper Verification of Cryptographic Signature in node-forge
Improper Verification of Cryptographic Signature in node-forge
Improperly checked metadata on tools/armour itemstacks received from the client
Failure to validate signature during handshake
RESTEasy 4.5.5.Final in hash flooding
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.