Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,071
Reset filtersMagento Open Source allows Improper Neutralization of Special Elements Used
Magento Open Source allows Incorrect Authorization
Magento Open Source allows Incorrect Authorization
Magento Open Source has Business Logic Errors Vulnerability
Magento Open Source affected by Improper Input Validation
Magento Open Source allows Server-Side Request Forgery (SSRF)
Magento Open Source allows Server-Side Request Forgery (SSRF)
Magento Open Source allows Incorrect Authorization
Magento Open Source allows XML Injection
Magento Open Source allows Incorrect Authorization
Magento Open Source allows Information Exposure
elFinder vulnerable to path traversal in LocalVolumeDriver connector
hjson stack exhaustion vulnerability
drupal/office_hours - SA-CONTRIB-2023-020
Dolibarr vulnerable to unauthenticated database access
Froxlor Session Fixation vulnerability
Teampass Cross-site Scripting vulnerability
Teampass Cross-site Scripting vulnerability
Froxlor vulnerable to Path Traversal
Froxlor vulnerable to Improper Restriction of Excessive Authentication Attempts
Microweber Cross-site Scripting vulnerability
Pimcore vulnerable to Pre-Auth Path Traversal in pimcore_log parameter
PocketMine-MP vulnerable to improperly checked dropped item count leading to server crash
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.