Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Smooth Scroll Page Up/Down Buttons <= 1.3 - Cross-Site Scripting
Local information disclosure via system temporary directory
Uncontrolled Resource Consumption in pillow
Command Injection in SaltStack Salt
Redirect 404 to parent < 1.3.1 - Reflected Cross-Site Scripting
Multiple Thrive Themes and Plugins (Various Versions) - Arbitrary Options Update
Select All Categories and Taxonomies, Change Checkbox to Radio Buttons < 1.3.2 - Reflected Cross-Site Scripting
Rss for Yandex Turbo <= 1.30 - Admin+ Stored Cross-Site Scripting
Directory Traversal in Archive_Tar
Observable Differences in Behavior to Error Inputs in Bouncy Castle
Cross-Site Request Forgery in Vert.x-Web framework
Cross-site Scripting in GwtUpload
Cross-site scripting in Apache CXF
Remote Code Execution and download tracking in Mintegral SDK
"Deserialization errors in MyBatis"
Missing Authentication for Critical Function in Apache Calcite
Authentication bypass in Apache Shiro
XSS Cross Site Scripting
Server session is not invalidated when logout() helper method of Authentication module is used in Vaadin 18-19
Server session is not invalidated when logout() helper method of Authentication module is used in Vaadin 18-19
Backport for CVE-2021-21024 Blind SQLi from Magento 2
Fixes a bug in Zend Framework's Stream HTTP Wrapper
Code Injection in oauth2-server
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.