Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,406
Reset filtersOctober CMS safe mode bypass using Twig sandbox escape
October CMS safe mode bypass using Page template injection
Validation of SignedInfo
OroCommerce get-totals-for-checkout API endpoint returns unwanted data
OroPlatform vulnerable to path traversal during temporary file manipulations
Cleartext Storage of Sensitive Information in HMAC SHA256 Authentication
Insertion of Sensitive Information into Log
Cross-site Scripting via uploaded assets
LibreNMS has Broken Access control on Graphs Feature
LibreNMS vulnerable to rate limiting bypass on login page
pocketmine/raklib reliable-ordered queue size is unlimited, allowing a session to hog server memory
TinyMCE vulnerable to mutation Cross-site Scripting via special characters in unescaped text nodes
Pimcore SQL Injection in Admin Grid Filter API through Multiselect::getFilterConditionExt()
pimcore/admin-ui-classic-bundle Full Path Disclosure via re-export document
Statamic CMS vulnerable to remote code execution via form uploads
yiisoft/yii deserializing untrusted user input can lead to remote code execution
Bypassing Cross-Site Scripting Protection in TYPO3 HTML Sanitizer
Symfony potential Cross-site Scripting in WebhookController
Symfony potential Cross-site Scripting vulnerabilities in CodeExtension filters
Symfony possible session fixation vulnerability
Moodle Cross-site Scripting vulnerability
Moodle Code Injection vulnerability
Moodle Cross-site Scripting vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.