Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Numpy arbitrary file write via symlink attack
Arbitrary file write in NumPy
GD Rating System <= 2.3 - Directory Traversal
GD Rating System <= 2.3 - Cross-Site Scripting
GD Rating System <= 2.3 - Cross-Site Scripting
GD Rating System <= 2.3 - Cross-Site Scripting
GD Rating System <= 2.3 - Cross-Site Scripting
GD Rating System <= 2.3 - Directory Traversal
GD Rating System <= 2.3 - Directory Traversal
GD Rating System <= 2.3 - Directory Traversal
Easy Discuss - XSS
LearnDash LMS <= 2.5.3 - Arbitrary File Upload
WP Job Board <= 4.4.4 - SQL Injection
Marked vulnerable to XSS from data URIs
Samlify vulnerable to Authentication Bypass by allowing tokens to be reused with different usernames
Add Link to Facebook <= 2.3 - Stored Cross-Site Scripting
BuddyPress Xprofile Custom Fields Type <= 2.6.3 - Arbitrary File Deletion
ImageInject <= 1.15 - Cross-Site Scripting
NebulaX < 5.0 - Unauthenticated SQL Injection
ImageInject <= 1.15 - Cross-Site Request Forgery
Plone Open Redirect
Big File Uploader by Prismanet - Insecure File Upload
pysaml2 Improper Authentication vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.