Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,071
Reset filtersCockpit Cross-site Scripting vulnerability
Admidio Insufficient Session Expiration vulnerability
omeka/omeka-s Improper Input Validation vulnerability
PyroCMS remote code execution vulnerability
Sulu Observable Response Discrepancy on Admin Login
Pimcore Path Traversal Vulnerability in AssetController:importServerFilesAction
pimcore/customer-management-framework-bundle Cross-site Scripting vulnerability in Segment name
drupal/matomo - SA-CONTRIB-2023-033
RaspAP Command Injection vulnerability
RaspAP Command Injection vulnerability
Silverstripe has Cross-site Scripting (XSS) vulnerabilities inherited from TinyMCE
Silverstripe Framework: Members with no password can be created and bypass custom login forms
phpMyFAQ Stored Cross-site Scripting vulnerability
phpMyFAQ Improper Neutralization of Formula Elements in a CSV File vulnerability
Field injection in the KirbyData text storage handler
Insufficient Session Expiration after a password change
XML External Entity (XXE) vulnerability in the XML data handler
Cross-site scripting (XSS) from MIME type auto-detection of uploaded files
Denial of service from unlimited password lengths
Stored Cross-Site Scripting October CMS
drupal/minifyhtml - SA-CONTRIB-2023-032
drupal/symfony_mailer - SA-CONTRIB-2023-031
Cross-Site Scripting in CKEditor4 WordCount Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.