Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Log injection in SimpleSAMLphp
Session key exposure through session list in Django User Sessions
Remote Code Execution in Angular Expressions
WP DS FAQ Plus < 1.4.2 - Cross-Site Scripting
wpCentral <= 1.4.7 - Privilege Escalation
Plone Unauthenticated Write Vulnerability
HTTP Request Smuggling: Content-Length Sent Twice in Waitress
drupal/spamspan - SA-CONTRIB-2020-002
postfix-mta-sts-resolver Algorithm Downgrade vulnerability
Ultimate Addons for Beaver Builder <= 1.24.3 - Cross-Site Scripting
Calculated Fields Form <= 1.0.353 - Authenticated Stored Cross-Site Scripting
Improper implementation of the session fixation protection in Infinispan
CSRF attack via CORS preflight requests with Spring MVC or Spring WebFlux
RFD attack via Content-Disposition header sourced from request input by Spring MVC or Spring WebFlux Application
AccessAlly < 3.3.2 - Arbitrary Code Execution
Chatbot with IBM Watson < 0.8.21 - Cross-Site Scripting
WooCommerce < 4.7.0 - Insecure Direct Object Reference via order_id Parameter
All-in-One WP Migration <= 7.14 - Unauthenticated Backup Download
Slideshow, Image Slider by 2J <= 1.3.31 - Authorization Bypass
PHUnit dependancy in PrestaShop and modules allow remote arbitrary PHP code execution
Elementor Website Builder <= 2.8.3 - Cross-Site Scripting
Marketo Forms and Tracking <= 1.0.2 - Cross-Site Request Forgery
Contextual Adminbar Color <= 0.2 - Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.