Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
tkinter is malware
Path Traversal in minsoft:ms-mcms
Prototype Pollution in merge
drupal/paragraphs - SA-CONTRIB-2018-073
drupal/decoupled_router - SA-CONTRIB-2018-071
GoUrl Bitcoin Payment Gateway & Paid Downloads & Membership <= 1.4.13 - Arbitrary File Upload
WP Editor.md – The Perfect WordPress Markdown Editor < 10.0.4 - Cross-Site Scripting
Apache ActiveMQ web console vulnerable to Cross-site Scripting
Missing Origin Validation in parcel-bundler
Improper Input Validation in kdcproxy
Calendar <= 1.3.10 - Authenticated Stored Cross-Site Scripting
Elegant Themes (Various Versions) - Stored Cross-Site Scripting
Rockhoist Ratings < 1.2.3 - SQL Injection
Elementor Pro <= 2.0.9 - Cross-Site Scripting
Deserialization of Untrusted Data in Pippo
Improper Input Validation in alilibaba:fastjson
Pie Register < 3.0.18 - Unauthenticated Cross-Site Scripting
No Charset in Content-Type Header in express
Cross-Site Scripting in handlebars
Private Data Disclosure in express-restify-mongoose
Use of Insufficiently Random Values in penggle:kaptcha
Improper Restriction of Operations within the Bounds of a Memory Buffer in akka-http-core
Akka Java Serialization vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.