Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Session fixation in express-openid-connect
Server side request forgery in SwaggerUI
Improper Authentication in Flask-AppBuilder
tarteaucitron.js – Cookies legislation & GDPR <= 1.5.4 - Cross-Site Request Forgery to Cross-Site Scripting
Accept Donations with PayPal <= 1.3.3 - Arbitrary Post Deletion via Cross-Site Request Forgery
Code injection via unsafe YAML loading
Laravel Framework XSS in Blade templating engine
drupal/webform - SA-CONTRIB-2021-045
Fathom Analytics <= 3.0.4 - Stored Cross-Site Scripting
WP Google Map <= 1.8.0 - Missing Authorization
Potential bypass of an upstream access control based on URL paths in Django
Command injection in git-it-electron
RegistrationMagic <= 5.0.1.7 - Authentication Bypass
PublishPress Capabilities <= 2.3 - Unauthenticated Arbitrary Options Update
WP Google Map <= 1.8.0 - Subscriber+ Arbitrary Post Deletion and Plugin Settings Update
SQL injection in prestashop/prestashop
Remote Code Execution in AjaxNetProfessional
Unexpected server crash in Next.js.
Deserialization of Untrusted Data in topthink/framework
10Web Social Photo Feed <= 1.4.28 - Reflected Cross-Site Scripting
Code injection in FreeIPA
Permissions not properly checked in Invenio-Drafts-Resources
firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.