Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Cross-site Scripting in HTML2PDF
Deserialization of Untrusted Data in Log4j 1.x
SQL Injection in Log4j 1.2.x
Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat
Security Advisory for "Log4Shell"
IBX-1392: Image filenames sanitization
Denial of service in CBOR library
Memory leak in micronaut-core
Cross-site Scripting OrchardCore.Application.Cms.Targets
Arbitrary code execution in H2 Console
Impersonation of other users (passing XBOX Live authentication) by theft of logins in PocketMine-MP
Unhandled exception when decoding form response JSON
Incorrect Default Permissions in log4js
Authorization Bypass Through User-Controlled Key in LiveHelperChat
Insufficient Session Expiration in Pterodactyl API
Invalid URL generation in bitlyshortener
Improper Restriction of XML External Entity Reference in skylot/jadx
Cross-site Scripting in pimcore
Cross-site Scripting in microweber
Exposure of Sensitive Information to an Unauthorized Actor in microweber
Microweber Incorrect Permission Assignment for Critical Resource vulnerability
Code Injection in microweber
Super Forms - Drag & Drop Form Builder WordPress <= 6.0.3 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.