Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,070
Reset filterspowermail TYPO3 extension has Insecure Direct Object Reference
Contao affected by insert tag injection via canonical URL
Contao affected by directory traversal in the file selector widget
Contao affected by remote command execution through file upload
Concrete CMS Stored XSS in the "Next&Previous Nav" block
drupal/seckit - SA-CONTRIB-2024-039
auditor-bundle vulnerable to Cross-site Scripting because name of entity does not get escaped
ThinkPHP deserialization vulnerability
Timber <= 1.23.1 - Use of a Vulnerable Dependency
Craft CMS vulnerable to stored XSS in breadcrumb list and title fields
Httpful is Missing Certificate Validation
drupal/paragraphs_table - SA-CONTRIB-2024-036
drupal/content_entity_clone - SA-CONTRIB-2024-035
drupal/freelinking - SA-CONTRIB-2024-034
Pimcore includes vulnerable PHPOffice/PhpSpreadsheet
"powermail" (powermail) Insecure Direct Object Reference (IDOR)
XXE in PHPSpreadsheet encoding is returned
PhpSpreadsheet HTML writer is vulnerable to Cross-Site Scripting via style information
Kirby has insufficient permission checks in the language settings
FeehiCMS User[avatar] unrestricted upload
Drupal Full Path Disclosure
FeehiCMS BannerForm[img] unrestricted upload
FeehiCMS file upload vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.