Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
SQL Injection in Apache Kylin
Kylin can receive user input and load any class through Class.forName(...).
Command Injection in Apache Kylin
Infinite Loop in Apache James
Command Injection in Apache James
Denial of Service in Apache James
Allocation of Resources Without Limits or Throttling in Apache Avro
Pac4j token validation bypass if OpenID Connect provider supports none algorithm
bookstack is vulnerable to Improper Access Control
Cross-site Scripting in DayByDay CRM
Missing Authorization in DayByDay CRM
Missing Authorization in DayByDay CRM
Weak Password Requirements in Daybyday CRM
Missing Authorization in DayByDay CRM
Denial of Service in soketi
Prototype Pollution in node-forge debug API.
Prototype Pollution in node-forge util.setPath API
URL parsing in node-forge could lead to undesired behavior.
A potential Denial of Service issue in protobuf-java
Regular Expression Denial of Service in postcss
OS Command Injection in diskusage-ng
Open Redirect in Grav
OS Command Injection in node-mpv
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.