Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,071
Reset filtersCross Site Scripting in thorsten/phpmyfaq
Cross Site Scripting in thorsten/phpmyfaq
AzuraCast missing brute force prevention
drupal/s3fs - SA-CONTRIB-2023-014
Moodle External Control of File Name or Path vulnerability
Moodle SQL Injection vulnerability
RosarioSIS vulnerable to CSV Injection
Pimcore Path Traversal Vulnerability in AdminBundle/Controller/Reports/CustomReportController.php
WWBN/AVideo stored XSS vulnerability leads to takeover of any user's account, including admin's account
Cross-site Scripting (XSS) in pimcore
phpMyFAQ Improper Access Control vulnerability
phpMyFAQ vulnerable to Stored Cross-site Scripting
Stored cross site scripting on API integration
Stored cross site scripting in RSS displayer
Concrete CMS (previously concrete5) is vulnerable to stored XSS in uploaded file and folder names
Missing rate limit for password resets
Reflected cross site scripting
Concrete CMS missing secure cookie parameters
Stored cross site scripting via container name
Stored cross site scripting on saved presets
Stored cross site scripting on tags
Concrete CMS (previously concrete5) is vulnerable to possible auth bypass in the jobs section
Remote code injection in wwbn/avideo
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.