Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,071
Reset filtersAdmidio Improper Neutralization of Formula Elements in a CSV File vulnerability
Admidio Improper Access Control vulnerability
Admidio Improper Access Control vulnerability
RaspAP raspap-webgui Command Injection vulnerability
Moodle vulnerable to Server Side Request Forgery
Moodle vulnerable to Cross-site Scripting
Moodle vulnerable to SQL Injection
fuadmin vulnerable to insecure file upload
laravel-s vulnerable to Local File Inclusion
php-imap vulnerable to RCE through a directory traversal vulnerability
drupal/civicccookiecontrol - SA-CONTRIB-2023-021
Liufee CMS File Upload vulnerability
Craft CMS vulnerable to HTML injection
YiiCMS Cross Site Scripting vulnerability
liufee CMS File Upload vulnerability
GilaCMS Cross Site Request Forgery vulnerability
NodCMS Cross Site Scripting vulnerability
Grav Server-side Template Injection (SSTI) via Twig Default Filters
Grav Server-side Template Injection (SSTI) via Denylist Bypass Vulnerability
Grav Server-side Template Injection (SSTI) via Twig Default Filters
Grav Server Side Template Injection (SSTI) vulnerability
ipandlanguageredirect extension vulnerable to SQL Injection
ke_search (aka Faceted Search) vulnerable to Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.