Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Easy WP SMTP <= 1.4.2 - Sensitive Information Disclosure
Cross-Site Scripting bypass in html-purify
ReDOS vulnerabities: multiple grammars
Themify Portfolio Post <= 1.1.5 - Authenticated Stored Cross-Site Scripting
Canto <= 1.9.0 - Blind Server-Side Request Forgery via detail.php
Profile Builder/Profile Builder Pro <= 3.3.2 - Authenticated Blind SQL Injection
lxml vulnerable to Cross-site Scripting
Multiple cryptographic issues in Python oic
Inappropriate implementation in V8
Buffer not correctly recycled in Gzip Request inflation
UNEDITABLE_SCHEMAS and UNEDITABLE_TABLE_DESCRIPTION_MATCH_RULES not respected by frontend service backend
Cross-site scripting in papermerge
Base class whitelist configuration ignored in OAuthenticator
Wibar | Wine and Vineyard WooCommerce WordPress Theme < 1.2.1 - Cross-Site Scripting
Canto <= 1.9.0 - Blind Server-Side Request Forgery via download.php
Use after free in CefSharp
Inappropriate implementation in V8 in CefSharp
Prototype Pollution in systeminformation
EventON <= 3.0.5 - Reflected Cross-Site Scripting
BuddyPress <= 6.3.0 - Insufficient Input Validation
NEX-Forms <= 7.7.1 - Missing Authorization on Various AJAX Actions
XXE in petl
Drupal core - SA-CORE-2020-013
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.