Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,221
Reset filtersFineUploader php-traditional-server unauthenticated arbitrary file upload vulnerability
Unauthenticated File Read in PHP Proxy
Showdoc CSRF Vulnerability
CSRF in PHP Server Monitor before 3.3.2
mPDF Unsafe Deserialization
Code Injection in baserCMS
Moodle SSRF Vulnerability
phpMyAdmin SSRF in replication
Several Zend Products Vulnerable to XXE and XEE attacks
Moodle SSRF Vulnerability
Craft CMS Vulnerable to Server-Side Template Injection
phpMyAdmin Improper Privilege Management
Contao Core directory traversal vulnerability
PEAR core file overwrite vulnerability
MAGMI cross-site scripting (XSS)
MAGMI plugin for Magento Server Directory Traversal
October CMS PHP Code Execution
October CMS File Upload Vulnerability
phpMyAdmin Arbitrary file read vulnerability
TeamPass Storing Passwords in a Recoverable Format vulnerability
SEOmatic plugin for Craft CMS SSTI Vulnerability
Moodle calculated question type allows remote code execution by Question authors
Moodle Users Can Bypass Deleted Status
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.