Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,071
Reset filtersTeamPass Code Injection vulnerability
Winter CMS stored XSS through privileged upload of SVG file
Archive_Tar contains Potential RCE if filename starts with phar://
TeamPass Cross-site Scripting vulnerability
league/oauth2-server key exposed in exception message when passing as a string and providing an invalid pass phrase
Statamic's Antlers sanitizer cannot effectively sanitize malicious SVG
Magento Open Source allows Cross-Site Scripting (XSS)
Artesãos SEOTools Open Redirect vulnerability
Artesãos SEOTools Open Redirect vulnerability
Artesãos SEOTools Open Redirect vulnerability
Concrete CMS Cross-site Scripting vulnerability
Connect-CMS Privilege Escalation Vulnerability
MediaWiki Cross-site Scripting vulnerability
phpMyFAQ Cross-site Scripting
Shopware improper mail validation vulnerability
Shopware dependency configuration exposed
drupal/tacjs - SA-CONTRIB-2023-029
drupal/expandable_formatter - SA-CONTRIB-2023-028
drupal/libraries_ui - SA-CONTRIB-2023-027
drupal/search_autocomplete - SA-CONTRIB-2023-026
drupal/mailchimp - SA-CONTRIB-2023-025
drupal/gridstack - SA-CONTRIB-2023-024
drupal/gdpr_alert - SA-CONTRIB-2023-023
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.