Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Cross-Site Scripting in node-red
RegistrationMagic – Custom Registration Forms, User Registration and User Login Plugin <= 4.6.0.1 - Cross-Site Scripting
Cross-Site Request Forgery in Webargs
Elementor Website Builder <= 2.8.4 - Reflected Cross-Site Scripting
Portfolio Gallery – Image Gallery Plugin <= 1.1.2 - Cross-Site Request Forgery
Elementor Website Builder <= 2.7.5 - Stored Cross-Site Scripting
Code Snippets <= 2.13.3 - Cross-Site Request Forgery to Remote Code Execution
Feedgen Vulnerable to XML Denial of Service Attacks
Unrestricted upload of file with dangerous type in Apache Solr
XSS in Dolibarr ERP & CRM
Segmentation faultin TensorFlow when converting a Python string to `tf.float16`
Improper Restriction of Excessive Authentication Attempts in py-bcrypt
Wordable <= 3.1.1 - Authentication Bypass
SAML Single Sign On – SAML SSO Login <= 4.8.83 - Cross-Site Scripting
Request smuggling is possible when both chunked TE and content length specified
Default development error handler in Ratpack is vulnerable to HTML content injection (XSS)
WPS Hide Login <= 1.5.4.2 - Hidden Login Page Location Disclosure
CarSpot – Dealership Wordpress Classified Theme <= 2.2.3 - Insecure Direct Object Reference
CarSpot – Dealership Wordpress Classified Theme <= 2.2.3 - Stored Cross-Site Scripting
Multiple Domain <= 1.0.2 - Cross-Site Scripting
Incorrect persistent NameID generation in SimpleSAMLphp
Incorrect signature verification in SimpleSAMLphp
Link injection in SimpleSAMLphp
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.