Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Cross-site Scripting in quill
Command Injection in @theia/messages
Prototype Pollution in swiper
Regular Expression Denial of Service in postcss
Infinite loop in Apache Tika
Privilege escalation in spring security
Broken Authentication in Atlassian Connect Spring Boot
Incorrect Authorization in Spring Cloud Netflix Zuul
Improper permission handling in Apache Solr
Server-Side Request Forgery in Apache Solr
Incorrect Authorization in Apache Solr
HTTP Request Smuggling in akka-http-core
LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin <= 4.21.0 - Stored Cross-Site Scripting
All in One SEO <= 4.1.0.1 - Authenticated Code Injection
Simple Giveaways <= 2.36.1 - Reflected Cross-Site Scripting
ReDi Restaurant Reservation <= 21.0307 - Stored Cross-Site Scripting
UpdraftPlus WordPress Backup Plugin < 1.6.59 - Stored Cross-Site Scripting
Wishlist and Compare for WooCommerce <= 1.0.4 - Authorization Bypass
OS Command Injection in ng-packagr
Uncontrolled Resource Consumption in json-bigint
TypeORM vulnerable to MAID and Prototype Pollution
CKEditor 4.0 vulnerability in the HTML Data Processor
Improperly Controlled Modification of Dynamically-Determined Object Attributes in vega-util
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.