Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Deserialization of Untrusted Data in jackson-databind
Deserialization of Untrusted Data in jackson-databind due to polymorphic deserialization
Arbitrary Code Execution in jackson-databind
Cross-Site Scripting in react-dom
Jinjava calls getClass
Moderate severity vulnerability that affects org.hswebframework.web:hsweb-commons
Cross-Site Request Forgery (CSRF) in hswebframework.web:hsweb-commons
rendertron LFI vulnerability
rendertron can remotely shut down Chrome instance
react-dev-utils on Windows vulnerable to Remote Code Execution
Missing Origin Validation in webpack-dev-server
sqla-yaml-fixtures is vulnerable to Code Injection
UserPro <= 4.9.20 - Privilege Escalation
kunena - XSS (Cross Site Scripting)
Booking Calendar <= 8.4.3 - SQL injection
Order XML File Export Import for WooCommerce < 1.2.3 - Cross-Site Scripting
Apache Tika Denial of Service due to Infinite Loop in Tika's SQLite3Parser
XML Sitemaps <= 4.0.9 - Authenticated Cross-Site Scripting
JSmol2WP <= 1.07 - Server-Side Request Forgery
Code injection in Danijar Definitions
Improper Access Control in commons-fileupload
Commons FileUpload Denial of service vulnerability
Path Traversal in Hadoop
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.