Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Login or Logout Menu Item <= 1.1.1 - Unauthenticated Settings Update
File Manager <= 4.8 - Missing Authorization on AJAX Actions
Allocation of Resources Without Limits or Throttling in Apache Tika
Allocation of Resources Without Limits or Throttling in Apache Tika
Allocation of Resources Without Limits or Throttling in Apache Tika
ND Learning <= 4.7 - Open Redirect
Popup Builder <= 3.44 - SQL Injection
ND Booking <= 2.4 - Unauthenticated Arbitrary Options Update
Rencontre – Dating Site <= 3.2.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Travel Management <= 1.6.1 - Open Redirect
Donations < 1.4 - Unauthenticated Arbitrary Options Change
Uncontrolled Recursion in Django
Django Denial-of-service in strip_tags()
Django Denial-of-service in django.utils.text.Truncator
Woody Ad Snippets <= 2.2.4 - Missing Authorization to Settings Import
Undertow Missing Authorization when requesting a protected directory without trailing slash
Deserialization of untrusted data in FasterXML jackson-databind
Deserialization of untrusted data in FasterXML jackson-databind
Deserialization of Untrusted Data in Apache Storm
Improper Input Validation and Missing Authentication for Critical Function in Apache ActiveMQ
XML External Entity (XXE) Injection in Apache Solr
Cross-Site Scripting in http-file-server
Cross-Site Scripting in min-http-server
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.