Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,071
Reset filtersSQL Injection vulnerability in Reportico Till
drupal/tacjs - SA-CONTRIB-2024-016
TinyMCE Cross-Site Scripting (XSS) vulnerability in handling iframes
TinyMCE Cross-Site Scripting (XSS) vulnerability in handling external SVG files through Object or Embed elements
dcat-admin Cross Site Scripting vulnerability
phpMyFAQ stored Cross-site Scripting at user email
phpMyFAQ's File Upload Bypass at Category Image Leads to RCE
phpMyFAQ Stored Cross-site Scripting at FAQ News Content
phpMyFAQ SQL injections at insertentry & saveentry
phpMyFAQ Stored HTML Injection at contentLink
phpMyFAQ Stored Cross-site Scripting at File Attachments
phpMyFAQ SQL Injection at "Save News"
Storefront user can access history and most viewed data from matching back-office user with the same ID
Pinned entity creation form shows wrong data
phpMyFAQ Path Traversal in Attachments
WP Crontrol <= 1.16.1 - Remote Code Execution
Cross-Site Request Forgery in Anchor CMS
Cross-Site Request Forgery in Anchor CMS
Slow String Operations via MultiPart Requests in Event-Driven Functions
Gadget chain in Symfony 1 due to uncontrolled unserialized input in sfNamespacedParameterHolder
Server Side Template Injection (SSTI) via Twig escape handler
Server Side Template Injection (SSTI)
Server Side Template Injection (SSTI)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.