Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,404
Reset filtersdrupal/permissions_by_term - SA-CONTRIB-2022-055
LibreNMS vulnerable to Cross-Site Scripting (XSS)
LibreNMS vulnerable to Cross-Site Scripting (XSS)
Cross-site scripting from content entered in the tags and multiselect fields
drupal/commerce_elavon - SA-CONTRIB-2022-053
Magento Open Source has Improper Access Control vulnerability
PocketMine-MP invalid skin geometry JSON data leading to server crash
CodeIgniter Shield Vulnerable to SameSite Attackers Bypassing the CSRF Protection
NotrinosERP Cross-site Scripting vulnerability
Magento Improper Access Control vulnerability
Magento stored Cross-Site Scripting (XSS) vulnerability
Magento stored Cross-Site Scripting (XSS) vulnerability
Cockpit Content Platform vulnerable to 2FA bypass
Rank Math SEO <= 1.0.95 - Server-Side Request Forgery
Cockpit before 2.2.0 vulnerable to Insufficient Session Expiration
mezzio-swoole Applications Using Diactoros Vulnerable to HTTP Host Header Attack
Diactoros before 2.11.1 vulnerable to HTTP Host Header Attack
Moodle Open redirect risk in mobile auto-login feature
Moodle Arbitrary file read when importing lesson questions
Moodle Stored XSS and blind SSRF possible via SCORM track details
Chain: SQL Injection (CWE-89) and Eval Injection (CWE-95)
Drupal core - SA-CORE-2022-015
Drupal core - SA-CORE-2022-014
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.