Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,404
Reset filtersMultiple vulnerabilities in extension "Newsletter subscriber management" (fp_newsletter)
TYPO3 vulnerable to Insufficient Session Expiration
TYPO3 CMS vulnerable to Sensitive Information Disclosure via YAML Placeholder Expressions in Site Configuration
TYPO3 CMS vulnerable to Arbitrary Code Execution via Form Framework
TYPO3 CMS vulnerable to Denial of Service in Page Error Handling
yikes-inc-easy-mailchimp-extender Cross-site Scripting vulnerability
phpMyFAQ has insecure HTTP cookies
Yii2 Gii Cross-site Scripting vulnerability
Akeneo PIM Community Edition vulnerable to remote php code execution
Cross-site scripting vulnerability in TinyMCE alerts
Craft CMS discloses password hashes
drupal/socialbase - SA-CONTRIB-2022-060
Tribal Systems Zenario CMS vulnerable to Session Fixation
Browsershot vulnerable to Cross-Site Scripting (XSS)
Browsershot does not validate URL protocols passed to Browsershot URL method
Browsershot version 3.57.3 vulnerable to improper input validation
Microweber vulnerable to cross-site scripting (XSS)
Moodle reflected cross-site scripting vulnerability in policy tool
Cross-site Scripting in Backdrop CMS
Cross-site Scripting in Backdrop CMS
Cross-site Scripting in Backdrop CMS
Cross site scripting vulnerability with discussion titles
Prevent RCE when deserializing untrusted user input
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.