Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
counterpart vulnerable to prototype pollution
CSVTOJSON has a prototype pollution vulnerability
min-document vulnerable to prototype pollution
messageformat prototype pollution vulnerability
Mangati NovoSGA XSS vulnerability in /admin
Apache ZooKeeper: Insufficient Permission Check in AdminServer Snapshot/Restore Commands
Apache IoTDB: DoS Vulnerability
Deserialization of Untrusted Data vulnerability in Apache IoTDB.
Liferay Portal and DXP does not properly expire sessions
TranslatePress <= 2.10.2 - Unauthenticated PHP Object Injection
BlindMatrix e-Commerce = 3.0 - Authenticated (Contributor+) Local File Inclusion
Di Themes Demo Site Importer <= 1.2 - Cross-Site Request Forgery
Advanced Settings <= 3.1.1 - Authenticated (Author+) Arbitrary File Upload
WSO2 Identity Server Apps allows content spoofing in logs
GP247 and S-Cart have a stored cross-site scripting (XSS) vulnerability
Http4s vulnerable to HTTP Request Smuggling due to improper handling of HTTP trailer section
WSO2 carbon-apimgt affected by an authenticated stored cross-site scripting (XSS) vulnerability
DNN vulnerable to Reflected Cross-Site Scripting (XSS) using url to profile
DNN Vulnerable to Stored XSS Using Backend Admin Credentials
DNN Vulnerable to Stored Cross-Site Scripting (XSS) in the Prompt module
Liferay Portal and DXP audit events record password reminder answers
Liferay Portal and DXP does not properly check permission with import and export tasks
Liferay Portal and DXP allows users to add a note to a different virtual instance
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.