Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked call into the proto file's name during generation of the resulting error me
SQL Injection in showdoc
Mingsoft MCMS SQL injection vulnerability
Mingsoft MCMS vulnerable to Remote Code Execution via file upload.
Mingsoft MCMS SQL injection vulnerability
[GWA] AutoResponder <= 2.3 - Unauthenticated SQL Injection
WP Google Map <= 1.8.3 - Arbitrary Post Deletion and Plugin Settings Update via Cross-Site Request Forgery
[GWA] AutoResponder <= 2.7.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WHMCS Bridge <= 6.3 - Reflected Cross-Site Scripting
An authenticated user can execute arbitrary command in Gerapy
Server side request forgery in @isomorphic-git/cors-proxy
Cross-site Scripting in pimcore
Business Logic Errors in pimcore
Improper Access Control in snipe-it
Cross-Site Request Forgery (CSRF) in livehelperchat
Cross-Site Request Forgery (CSRF) in livehelperchat
drupal/private_taxonomy - SA-CONTRIB-2022-014
Improper Privilege Management in Conda loguru prior to 0.5.3.
SQL Injection in JeecgBoot
WordPress GDPR & CCPA < 1.9.26 - Reflected Cross-Site Scripting
StatCounter <= 2.0.6 - Admin+ Stored Cross-Site Scripting
Embed Swagger <= 1.0.0 - Reflected Cross-Site Scripting
WP RSS Aggregator <= 4.19.3 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.