Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Cross-Site Scripting in status-board
Status Board vulnerable to Cross-Site Scripting before v1.1.82
Improper Input Validation and Cross-Site Request Forgery in Keycloak
Improper Verification of Cryptographic Signature in keycloak
Access of Resource Using Incompatible Type ('Type Confusion') in yourls/yourls
High severity vulnerability that affects generator-jhipster
DELUCKS SEO < 2.1.8 - Stored Cross Site Scripting
WP Google Map Plugin <= 4.0.9 - Cross-Site Request Forgery to PHP Object Injection
WP MAPS – Easiest & Most Advanced WordPress Plugin for Google Maps <= 4.0.9 - Reflected Cross-Site Scripting
Ultimate FAQ <= 1.8.24 - Unauthenticated Options Import/Export
Ultimate FAQ <= 1.8.24 - Cross-Site Scripting
Motors Car Dealer & Classified Ads <= 1.4.0 - Unauthenticated Settings Import/Export
Motors – Car Dealer, Classifieds & Listing <= 1.4.0 - Stored Cross-Site Scripting
Export Users to CSV < 1.4 - CSV Injection
drupal/tablefield - SA-CONTRIB-2019-067
drupal/create_user_permission - SA-CONTRIB-2019-066
WooCommerce AJAX Product Filters <= 1.3.6 - Arbitrary Settings Update
Symlink Arbitrary File Overwrite in bower
Moderate severity vulnerability that affects league/commonmark
Improper Handling of Exceptional Conditions and Origin Validation Error in Eclipse Paho Java client library
Command Injection in gitlabhook
Poll, Survey & Quiz Maker Plugin by Opinion Stage <= 19.6.24 - Unauthenticated Stored Cross-Site Scripting
High severity vulnerability that affects System.Management.Automation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.