Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
XSS via JQLite DOM manipulation functions in AngularJS
CSRF Vulnerability in polaris-website
Reset Password / Login vulnerability in Sulu
drupal/group - SA-CONTRIB-2020-033
drupal/group - SA-CONTRIB-2020-032
Denial of service in fastify
Prototype Pollution in express-fileupload
Code execution in Spring Integration
Operation on a Resource after Expiration or Release in Jetty Server
Reliance on Cookies without validation in OctoberCMS
Stored XSS in October
CSRF vulnerability in save-server
CMP <= 3.8.1 - Missing Authorization
Facebook Chat Plugin <= 1.5 - Missing Capabilities Check
Quiz and Survey Master <= 7.0.0 - Arbitrary File Upload
Ajax Search Pro <= 4.18.7 - Cross-Site Request Forgery to Cross-Site Scripting
Ajax Search Pro <= 4.18.7 - Authenticated (Subscriber+) SQL Injection
Newsletter <= 6.8.1 - Reflected Cross-Site Scripting
Elegant Themes (Multiple Versions) - Arbitrary File Upload
Quiz and Survey Master <= 7.0.0 - Unauthenticated Arbitrary File Deletion
Product Input Fields for WooCommerce <= 1.2.6 - Missing Authorization
Newsletter <= 6.8.1 - Authenticated PHP Object Injection
Cross-site Scripting vulnerability in Kitodo.Presentation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.