Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
music collection - SQL Injection
Patreon WordPress < 1.2.2 - PHP Object Injection
Session Fixation in Tryton
Improper Authentication in hive:hive-exec
Moderate severity vulnerability that affects org.apache.hive:hive-jdbc
SQL Injection in hive-jdbc
Exposure of Sensitive Information to an Unauthorized Actor in Apache hive
Incorrect Permission Assignment for Critical Resource in Apache hive
High severity vulnerability that affects org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service
Low severity vulnerability that affects org.apache.hive:hive-exec, org.apache.hive:hive, and org.apache.hive:hive-service
Denial of Service in ethereumjs-vm
Improper Certificate Validation in proton-j
SimpleMDE XSS Vulnerability
Cross-site Scripting in yapi-vendor
Ckeditor XSS Vulnerability
Valine HTML Injection
Remote Code Execution in spark-core
kunena - XSS (Cross Site Scripting)
AMP for WP <= 0.9.97.20 - Stored Cross-Site Scripting
PropertyHive < 1.4.26 - Remote Code Execution
Jupyter Notebook XSS via directory name
Jupyter Notebook XSS via untrusted notebooks
Jimtawl
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.