Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,070
Reset filtersImproper Restriction of XML External Entity Reference in dompdf/dompdf
Cross site scripting in sylius/sylius
FileManager Deserialization of Untrusted Data vulnerability
UnoPim Stored XSS : Cookie hijacking through Create User function
Symfony has an Authentication Bypass via RememberMe
drupal/postfile - SA-CONTRIB-2024-060
drupal/postfile - SA-CONTRIB-2024-059
Moodle IDOR when accessing list of badge recipients
Craft CMS vulnerable to Potential Remote Code Execution via missing path normalization & Twig SSTI
Craft CMS Arbitrary System File Read
Local File System Validation Bypass Leading to File Overwrite, Sensitive File Access, and Potential Code Execution
Laravel environment manipulation via query string
Cross Site Scripting vulnerability in Snipe-IT
Orchid Platform has Method Exposure Vulnerability in Modals
Moodle reflected XSS via H5P error message
Moodle Cross-site Scripting vulnerability
Moodle has insufficient access control
Moodle authorization headers preserved between "emulated redirects"
Moodle has insufficient capability checks
Moodle admin presets export tool includes some secrets that should not be exported
Moodle's user/power level management inconsistent with suspended users
Moodle has user information visibility control issues in gradebook reports
Froala WYSIWYG editor allows cross-site scripting (XSS)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.