Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,068
Reset filtersIncorrect Authentication in shopware
HTTP caching is marking private HTTP headers as public in Shopware
HTML injection possibility in voucher code form in Shopware
Shopware user session is not logged out if the password is reset via password recovery
Shopware guest session is shared between customers
Exposure of Private Personal Information to an Unauthorized Actor in alextselegidis/easyappointments
Improper Neutralization of Special Elements Used in a Template Engine in microweber
drupal/opigno_learning_path - SA-CONTRIB-2022-029
drupal/svg_formatter - SA-CONTRIB-2022-028
Server-Side Request Forgery and Open Redirect in AllTube Download
Cross-site Scripting in BookStack
Cross-site Scripting in Pimcore
Cross-site Scripting in Pimcore
Cross Site Request Forgery in intelliants/subrion
Cross-site Scripting in intelliants/subrion
Cross-site Scripting in Subrion CMS
Cross-site Scripting in GeniXCMS
Code injection in dolibarr/dolibarr
Cross site scripting in getgrav/grav
Cross-site Scripting in Cipi
Rate limit missing in microweber
Improper regex in htaccess file
Server-Side Request Forgery (SSRF) in rudloff/alltube
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.