Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Improper input validation in Apache Olingo
Improper input validation in Apache Shiro
Catastrophic backtracking in regex allows Denial of Service in Waitress
Tutor LMS < 1.5.3 - Cross-Site Request Forgery
SQL injection in Django
Ninja Forms Contact Form <= 3.4.22 - Stored Cross-Site Scripting
Htaccess <= 1.8.1 - Cross-Site Request Forgery
Strong Testimonials <= 2.40.0 - Stored Cross Site Scripting
TablePress <= 1.14 - Authenticated (Author+) CSV Injection
Ability to switch channels via GET parameter enabled in production environments
XML external entity (XXE) processing ('external-parameter-entities' feature was not fully disabled))
auth0-lock vulnerable to XSS via unsanitized placeholder property
Untrusted data can lead to DoS attack due to hash collisions and stack overflow in MessagePack
Login by Auth0 3.11.0 - 3.11.2 - Cross-Site Scripting
GistPress < 3.0.2 - Cross-Site Scripting
Malicious takeover of previously owned ENS names
Cross-site scripting vulnerability in TinyMCE
Unauthenticated Access Via OAI-PMH
Password Hashing: Do not use MD5
Unsafe Identifiers in Opencast
Hard-Coded Key Used For Remember-me Token in Opencast
Users with ROLE_COURSE_ADMIN can create new users in Opencast
Authentication Bypass For Endpoints With Anonymous Access in Opencast
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.