Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,071
Reset filtersMoodle BigBlueButton web service leaks meeting joining information
Moodle stored XSS via calendar's event title when deleting the event
Dolibarr arbitrary file upload vulnerability
Moodle HTTP authorization header is preserved between "emulated redirects"
Moodle CSRF risks due to misuse of confirm_sesskey
Firefly III has a MFA bypass in oauth flow
Snipe-IT allows users to promote or demote themselves or other users
Magento Open Source Server-Side Request Forgery (SSRF) vulnerability
Magento Open Source Improper Authentication vulnerability
Magento Open Source Incorrect Authorization vulnerability
Magento Open Source Improper Authorization vulnerability
Magento Open Source Cross-Site Scripting (XSS) vulnerability
Magento Open Source Improper Access Control vulnerability
Magento Open Source affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability
Composer has a command injection via malicious git branch name
Composer has multiple command injections via malicious git/hg branch names
nukeviet Deserialization of Untrusted Data vulnerability
WooCommerce 8.8.0 - 8.9.2 - Reflected Cross-Site Scripting via Order Attribution
zfr authentication adapter did not verify validity of tokens
ZendOpenID potential security issue in login mechanism
Zendframework1 Potential SQL injection in ORDER and GROUP functions
Zendframework Potential Information Disclosure and Insufficient Entropy vulnerability
ZendFramework1 Potential Insufficient Entropy Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.