Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,406
Reset filtersLibreNMS vulnerable to a Time-Based Blind SQL injection leads to database extraction
LibreNMS vulnerable to SQL injection time-based leads to database extraction
Dolibarr Application Home Page has HTML injection vulnerability
Dusk plugin may allow unfettered user authentication in misconfigured installs
Mautic: MST-48 Server-Side Request Forgery in Asset section
Mautic vulnerable to Relative Path Traversal / Arbitrary File Deletion due to GrapesJS builder
Timber <= 1.23.0 - Authenticated (Admin+) PHP Object Injection
Mautic vulnerable to cross-site scripting in notifications via saving Dashboards
Reportico affected by Incorrect Access Control
Mautic vulnerable to stored cross-site scripting in description field
Magento Open Source allows Cross-Site Scripting (XSS)
Contao: Possible cookie sharing with external domains while checking protected pages for broken links
Gleez Cms Server Side Request Forgery (SSRF) vulnerability
OpenID Connect Authentication (oidc) Typo3 extension Authentication Bypass
RosarioSIS cross site scripting vulnerability
Kimai API returns timesheet entries a user should not be authorized to view
SQL Injection vulnerability in Reportico Till
drupal/tacjs - SA-CONTRIB-2024-016
TinyMCE Cross-Site Scripting (XSS) vulnerability in handling iframes
TinyMCE Cross-Site Scripting (XSS) vulnerability in handling external SVG files through Object or Embed elements
phpMyFAQ stored Cross-site Scripting at user email
phpMyFAQ's File Upload Bypass at Category Image Leads to RCE
phpMyFAQ SQL injections at insertentry & saveentry
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.