Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
AccessPress Themes and Plugin <= Various Versions - Cross-Site Request Forgery
Adaptive Images <= 0.6.68 - Reflected Cross-Site Scripting
Pipenv's requirements.txt parsing allows malicious index url in comments
Infinite loop causing Denial of Service in colors
Arbitrary expression injection in Pillow
Out-of-bounds Read in Pillow
Improper Initialization in Pillow
dnslib has DNS reply verification issue
WP-DownloadManager <= 1.68.6 - Stored Cross-Site Scripting
CLUEVO E-Learning Platform <= 1.8.0 - Authenticated Cross-Site Scripting
Ivory Search <= 5.4 - Multiple Admin+ Stored Cross-Site Scripting
Translate WordPress with GTranslate <= 2.9.6 - Reflected Cross-Site Scripting
All-in-one Floating Contact Form <= 2.0.3 - Reflected Cross-Site Scripting
SEUR Oficial < 1.7.2 - Authenticated Arbitrary File Download
WooCommerce – Store Exporter <= 2.7 - Reflected Cross-Site Scripting
Store Toolkit for WooCommerce <= 2.3.1 - Reflected Cross-Site Scripting
markdown-it < 1.3.2 - Uncontrolled Resource Consumption
Cross-site Scripting in Apache Pluto
Cross-site Scripting in Apache Pluto
Cross-site Scripting in Apache Pluto
Cross-site Scripting in Scratch-Svg-Renderer
In Apache Kylin, Cross-origin requests with credentials are allowed to be sent from any origin.
Use of Hard-coded Credentials in Apache Kylin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.