Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,071
Reset filtersCode Injection in alextselegidis/easyappointments
Possible CSRF token fixation (CWE-352)
Company admin role gives excessive privileges in eZ Platform Ibexa
Timing attack in eZ Platform Ibexa
Funadmin vulnerable to SQL injection
cockpit-hq/cockpit is vulnerable to unrestricted file uploads
pimcore is vulnerable to cross-site scripting
Froxlor is vulnerable to authentication bypass
Cross-site Scripting (XSS) in pimcore/pimcore
SQL Injection in Funadmin
SQL Injection in Funadmin
SQL Injection in Funadmin
drupal/gutenberg - SA-CONTRIB-2023-009
Easy!Appointments uses hard-coded credentials
SQL Injection in Funadmin
SQL Injection in Funadmin
SQL Injection in Funadmin
Moodle Cross-site Scripting vulnerability
Moodle Cross-site Scripting vulnerability
Moodle has Incorrect Default Permissions
Moodle vulnerable to Stored Cross-site Scripting
Moodle has a Hidden Functionality vulnerability
Moodle Improper Input Validation vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.