Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Open redirect in Jupyter Notebook
Secret disclosure when containing characters that become URI encoded
Cross-Site Scripting through Fluid view helper arguments
drupal/miniorange_saml - SA-CONTRIB-2020-038
Drupal core - SA-CORE-2020-012
drupal/examples - SA-CONTRIB-2020-035
Open Redirect in werkzeug
Fancy Product Designer <= 4.5.0 - Stored Cross-Site Scripting
Reflected XSS with parameters in PostComment
XStream can be used for Remote Code Execution
Security issues in AWS KMS and AWS Encryption SDKs: in-band protocol negotiation and robustness
Paid Memberships Pro <= 2.5.0 - Cross-Site Scripting
WP Database Error Manager <= 2.1.6 - Reflected Cross-Site Scripting
Persistent XSS in newsletter module in Shopware
Persistent XSS in shopping worlds
Vulnerability in RPKI manifest validation
Persistent XSS in customer module in Shopware
AIT CSV import/export <= 3.0.3 - Unauthenticated Arbitrary File Upload
Prototype Pollution in json-logic-js
Timing attacks in python-rsa
Good LMS <= 2.1.4 - Unauthenticated SQL Injection
Exploitable inventory component chaining in PocketMine-MP
malicious SVG attachment causing stored XSS vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.