Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,070
Reset filtersMoodle course access permissions are not properly checked in course_output_fragment_course_overview
Admidio Vulnerable to Authenticated SQL Injection in Member Assignment Functionality
code16 Sharp vulnerable to Cross Site Scripting (XSS)
ProcessWire CMS vulnerable to resource-exhaustion Denial of Service
Shopware Customer Orders can be canceled, even if refunds are disabled
Shopware exposes sensitive user information via CSV export mapping
Shopware vulnerable to Server-Side Request Forgery (SSRF) – order invoice
Shopware vulnerable to path traversal via Plugin upload
Shopware vulnerable to MediaVisibilityRestrictionSubscriber bypass when reading media entities by aggregating fields individually
Citizen vulnerable to stored XSS in sticky header button messages
TastyIgniter vulnerable to Cross-Site Scripting
Cargo Mediawiki Extension vulnerable to Cross-site Scripting
ibexa/fieldtype-richtext has an XSS vulnerability via acronym custom tag in Rich Text
ibexa/admin-ui has an XSS vulnerability in Cancel/Reschedule future publication modal
ezsystems/ezplatform-admin-ui has an XSS vulnerability in Cancel/Reschedule future publication modal
ibexa/user login enumerates user accounts
bagisto has Cross Site Scripting (XSS) in Create New Customer
bagisto has CSV Formula Injection in Create New Product
bagisto has a Cross Site Scripting (XSS) vulnerability in TinyMCE Image Upload (SVG)
bagisto has Server Side Template Injection (SSTI) in Product Description
LibreNMS alert-rules has a Cross-Site Scripting Vulnerability
PrestaShop Checkout Target PayPal merchant account hijacking from backoffice
PrestaShop Checkout Backoffice directory traversal allows arbitrary file disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.