Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
jackson-databind mishandles the interaction between serialization gadgets and typing
jackson-databind mishandles the interaction between serialization gadgets and typing
jackson-databind mishandles the interaction between serialization gadgets and typing
Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible
Photo Gallery by 10Web <= 1.5.54 - SQL Injection via bwg_search_x Parameter
Login/Signup Popup < 1.5 - Missing Authorization
WP Product Review Lite <= 3.7.5 - Unauthenticated Stored Cross Site Scripting
Backend Same-Site Request Forgery in TYPO3 CMS
Insecure Deserialization in Backend User Settings in TYPO3 CMS
Class destructors causing side-effects when being unserialized in TYPO3 CMS
Cross-Site Scripting in TYPO3 CMS Link Handling
Cross-Site Scripting in TYPO3 CMS Form Engine
Information Disclosure in Password Reset
Cross-Site Scripting in SVG Sanitizer
drupal/recaptcha_v3 - SA-CONTRIB-2020-019
curlrequest allows execution of arbitrary commands
path traversal in Jooby
drupal/webform - SA-CONTRIB-2020-018
Easy Testimonials <= 3.5.2 - Authenticated Stored Cross-Site Scripting
Exposure of Sensitive Information to an Unauthorized Actor in ansible
False-negative validation results in MINT transactions with invalid baton
Exposure of Sensitive Information to an Unauthorized Actor in Apache Kafka
False-negative validation results in MINT transactions with invalid baton
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.