Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Improper Privilege Management in apache-airflow
android-gif-drawable vulerable to denial of service due to unrestricted comment length
Improper Handling of Insufficient Permissions or Privileges in MySQL Connectors Java
WordPress Download Manager <= 3.2.33 - Authenticated SQL Injection
Execution with Unnecessary Privileges in ipython
Drupal core - SA-CORE-2022-001
drupal/jquery_ui_datepicker - SA-CONTRIB-2022-004
Deserialization of Untrusted Data in Apache Log4j
AnyComment <= 0.2.17 - Cross-Site Request Forgery
WOOCS <= 1.3.7.4 - Reflected Cross-Site Scripting via AJAX action
AnyComment <= 0.2.17 - Race Condition
Shield Security <= 13.0.5 - Admin+ Stored Cross-Site Scripting
Support Board <= 3.4.1 - Authenticated SQL Injection
WP HTML Mail <= 3.0.9 - Missing Authorization on Rest Route
Incorrect Permission Assignment for Critical Resource in OnionShare
Improper Access Control in Onionshare
OTF-001: Improper Input Sanitation: The path parameter of the requested URL is not sanitized before being passed to the QT frontend
Improper Access Control in Onionshare
Path traversal in Onionshare
Improper Access Control in Onionshare
Denial of Service in Onionshare
Out-of-bounds Read in Onionshare
Username spoofing in OnionShare
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.