Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Paid Memberships Pro <= 2.6.6 - Unauthenticated SQL Injection
Improper Input Validation in Parquet-MR
pytorch-lightning is vulnerable to Deserialization of Untrusted Data
RCE in H2 Console
Uncapped length of skin data fields submitted by players
Book page text, count, and author/title length is not limited in PocketMine-MP
Open redirect in shopware
Insufficient Session Expiration in shopware
Hash collision in typelevel jawn
Sandbox bypass in Latte templates
OS Command Injection in Laravel Framework
Deserialization of Untrusted Data in Codeigniter4
jquery.terminal self XSS on user input
uppy's companion module is vulnerable to Server-Side Request Forgery (SSRF)
Insertion of Sensitive Information into Log File in Apache Geode
showdoc is vulnerable to Generation of Error Message Containing Sensitive Information
Injection in UserFrosting
Cross-site Scripting in Netgen Tags Bundle
showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
Prototype Pollution in js-data
invoiceninja is vulnerable to Cross-site Scripting
Uncontrolled Resource Consumption in parse-link-header
elgg is vulnerable to Cross-site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.