Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,404
Reset filtersMicroweber Cross-site Scripting vulnerability
Pimcore vulnerable to Cross-site Scripting
frp_form_answers allows Cross-site Scripting
Codiad information disclosure vulnerability
Moodle Improper Access Control vulnerability
Cross-site Scripting in kimai/kimai
Cross-site Scripting vulnerability in drag-and-drop upload of phpMyAdmin
privilege chaining in cockpit-hq/cockpit
TYPO3 is vulnerable to Cross-Site Scripting via frontend rendering
Deserialization of Untrusted Data in thinkphp
URI validation failure on SVG parsing. Bypass of CVE-2023-23924
wallabag contains Improper Authorization via export feature
Pimcore contains Unrestricted Upload of File with Dangerous Type
AVideo contains Command injection when embedding a video link
Symfony storing cookie headers in HttpCache
Symfony vulnerable to Session Fixation of CSRF tokens
Microweber contains Cross-site Scripting
Dompdf vulnerable to URI validation failure on SVG parsing
Froxlor contains Business Logic Errors
Froxlor contains Static Code Injection
Froxlor contains Unchecked Error Condition
Froxlor contains Weak Password Requirements
DoS vulnerability in MaliciousCode filter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.