Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,071
Reset filtersSubrion Cross-Site Scripting (XSS) vulnerability
NukeViet Cross-site Scripting via the editor in the News module
NukeViet SQL Injection vulnerability
NukeViet SQL Injection vulnerability via topicsid parameter
ThinkCMF Cross Site Request Forgerly (CSRF) vulnerability
LavaLite Stored Cross-site Scripting vulnerability
Stored XSS in LavaLite 5.8.0
Stored XSS in LavaLite 5.8.0
EC-CUBE Cross-site scripting vulnerability
EC-CUBE Cross-site scripting vulnerability
Magento Violation of Secure Design Principles vulnerability in RMA PDF filename formats
Magento DOM-based Cross-Site Scripting vulnerability on mage-messages cookies
Magento Unauthorized access to restricted resources
Magento Path Traversal vulnerability
Magento Improper input validation vulnerability
Moodle command execution vulnerability exists in the default legacy spellchecker plugin
MantisBT allows XSS in manage_custom_field_edit_page.php
Moodle Cross Site Scripting (XSS)
SilverStripe XXE Vulnerability in CSSContentParser
EC-CUBE Cross-site scripting vulnerability
Drupal Core Open Redirect vulnerability
Cross Site Scripting (XSS) in LavaLite 5.8.0
Wikimedia Parsoid vulnerable to Cross-site Scripting (XSS)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.