Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,071
Reset filtersBookStack Incorrect Access Control vulnerability
Login by Auth0 <= 4.6.0 - Reflected Cross-Site Scripting via wle
EGroupware mishandles an ORDER BY clause
ai-controller-frontend payment status in basket isn't reset
ShopXO Server-Side Request Forgery Vulnerability
aimeos/ai-admin-jsonadm improper access control vulnerability allows editors to remove required records
aimeos/ai-admin-graphql improper access control vulnerability allows editors to manage own services
aimeos/ai-admin-graphql improper access control vulnerability allows an editor to modify admin account
Name confusion in x509 Subject Alternative Name fields
October System module has an Open Redirect for Administrator Accounts
October System module has a Reflected XSS via X-October-Request-Handler Header
Craft CMS SQL injection vulnerability via the GraphQL API endpoint
Aimeos HTML client may potentially reveal sensitive information in error log
Zip slip in opencart
Arbitrary File Creation in opencart
Cross site scripting in opencart
Cross site scripting in opencart
Cross site scripting in opencart
SQL injection in opencart
events2 TYPO3 extension insecure direct object reference (IDOR) vulnerability
FriendlyCaptcha Plugin for TYPO3 Captcha Check Bypass
TinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable_regexp option
TinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elements
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.