Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Liferay Portal Vulnerable to CSRF in Headless APIs
Liferay Portal Does Not Limit Access to APIs Before Email Verification
Liferay Portal Stores Password Reset Tokens in Plain Text
Easy Testimonial Slider and Form <= 1.0.2 - Authenticated (Admin+) SQL injection
Polylang <= 3.7.3 - Authenticated (Contributor+) PHP Object Injection
Elastic Email Sender <= 1.2.20 - Missing Authorization
Яндекс Доставка (Boxberry) <= 2.32 - Missing Authorization
Contact Form 7 PDF, Google Sheet & Database <= 3.0.0 - Authenticated (Subscriber+) Arbitrary File Upload
IDonate < 2.1.13 - Missing Authorization
User Toolkit <= 1.2.3 - Unauthenticated Privilege Escalation
LiteSpeed Cache <= 7.5.0.1 - Reflected Cross-Site Scripting
Thumbnail Slider With Lightbox <= 1.0.4 - Authenticated (Admin+) SQL Injection
Soledad <= 8.7.0 - Authenticated (Contributor+) Local File Inclusion
ImageMagick CLAHE : Unsigned underflow and division-by-zero lead to OOB pointer arithmetic and process crash (DoS)
Liferay Portal Vulnerable to Information Exposure Through a Log File Vulnerability in LDAP Import Feature
Liferay Portal Vulnerable to Cross-Site Scripting
Liferay Portal Vulnerable to Open Redirect via the _com_liferay_layout_admin_web_portlet_GroupPagesPortlet_redirect parameter
Keycloak TLS Client-Initiated Renegotiation Denial of Service
InventoryGui allows item duplication with experimental "Bundle" item in GUIs which use GuiStorageElement
InventoryGui affected by item duplication in GUIs which use GuiStorageElement
Apache Tomcat Vulnerable to Improper Neutralization of Escape, Meta, or Control Sequences
Apache Tomcat Vulnerable to Relative Path Traversal
Apache Tomcat Vulnerable to Improper Resource Shutdown or Release
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.