Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,406
Reset filtersFormwork improperly validates input of User role preventing site and panel availability
Formwork has a cross-site scripting (XSS) vulnerability in Site title
Mautic allows Relative Path Traversal in assets file upload
Mautic allows Improper Authorization in Reporting API
Mautic allows Remote Code Execution and File Deletion in Asset Uploads
Moodle has an arbitrary file read risk through pdfTeX
Leantime affected by Improper Neutralization of HTML Tags
Leantime allows Cross-Site Request Forgery (CSRF)
Leantime allows Cross Site Scripting (XSS) and SQL Injection (SQLi)
Leantime allows Stored Cross-Site Scripting (XSS)
Leantime allows Refelected Cross-Site Scripting (XSS)
Leantime has Host Header Injection Vulnerability
Drupal core - SA-CORE-2025-003
Drupal core - SA-CORE-2025-001
Crayfish Allows Remote Code Execution via hypercube X-Islandora-Args Header
Improper Authorization vulnerability in Magento and Adobe Commerce
Magento Improper Access Control vulnerability
Magento Improper Access Control vulnerability
Magento stored Cross-Site Scripting (XSS) vulnerability
Magento Improper Access Control vulnerability
Magento Improper Access Control vulnerability
Magento stored Cross-Site Scripting (XSS) vulnerability
Magento Improper Access Control vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.