Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,404
Reset filtersIncorrect Authentication in shopware
HTTP caching is marking private HTTP headers as public in Shopware
HTML injection possibility in voucher code form in Shopware
Shopware user session is not logged out if the password is reset via password recovery
Shopware guest session is shared between customers
Exposure of Private Personal Information to an Unauthorized Actor in alextselegidis/easyappointments
Server-Side Request Forgery and Open Redirect in AllTube Download
Cross-site Scripting in Pimcore
Cross-site Scripting in Pimcore
Rate limit missing in microweber
Improper regex in htaccess file
Server-Side Request Forgery (SSRF) in rudloff/alltube
Cross-Site Request Forgery (CSRF) Protection Bypass Vulnerability in CodeIgniter4
Remote CLI Command Execution Vulnerability in CodeIgniter4
EC-CUBE improperly handles HTTP Host header values
Missing server signature validation in OctoberCMS
Improper Authorization in dolibarr/dolibarr
Open Redirect in AllTube
Authenticated remote code execution in October CMS
drupal/govuk_theme - SA-CONTRIB-2022-027
Path traversal in pimcore
Generation of Error Message Containing Sensitive Information in microweber
Exposure of Resource to Wrong Sphere in ezsystems/ezplatform-kernel
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.