Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,071
Reset filtersthorsten/phpmyfaq vulnerable to authentication bypass
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via category field name parameter
thorsten/phpmyfaq vulnerable to cross-site scripting (XSS) via stopword parameter
thorsten/phpmyfaq vulnerable to improper access control
thorsten/phpmyfaq vulnerable to DOM cross-site scripting (XSS) via configuration privacy note URL parameter
Microweber vulnerable to stored cross-site scripting (XSS) via X-Forwarded-For header
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via artlang parameter
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via updatecategory parameter
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via adminlog
Microweber vulnerable to command injection
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) in FAQ comment username parameter
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via FAQ News link parameter
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via HTML export
Uvdesk remote code execution vulnerability
Uvdesk vulnerable to stored cross-site scripting (XSS)
pimcore is vulnerable to cross-site scripting in Composite indices key field
Silverstripe Form Capture vulnerable to stored cross-site-scripting
Pimcore Perspective Editor vulnerable to stored cross-site scripting (XSS) in perspective name
Firefly III vulnerable to improper input validation
X-Forwarded-For header allows brute-forcing autoblocked IP addresses
Appwrite Server-Side Request Forgery vulnerability
Pimcore vulnerable to Reflected XSS in Predefined Properties module in Settings
Pimcore Cross-site Scripting in Predefined Asset Metadata module in Settings
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.