Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,404
Reset filtersFront End User Registration (sr_feuser_register) extension for TYPO3 allows remote attackers to obtain user names, passwords
SimpleSAMLphp Unauthenticated encryption in CBC mode
fal_sftp extension for TYPO3 uses weak permissions for sFTP driver files and folders
Dolibarr ERP and CRM contain XSS Vulnerability
GeniXCMS denial of service (account blockage)
Dolibarr cross-site scripting (XSS) vulnerability
Fastly Magento2 sensitive information disclosure
Moodle sensitive information disclosure
Swift Mailer mail transport Command Injection
MetalGenix GeniXCMS vulnerable to SQL Injection
Zeta Components Mail Arbitrary code execution via a crafted email address
Moodle Exposure of Sensitive Information to an Unauthorized Actor
Dolibarr sensitive information disclosure
Dolibarr ERP and CRM contain XSS Vulnerability
Shopware XSS Vulnerability
SilverStripe CSV Excel Macro Injection
Mautic Cross Site Scripting (XSS) vulnerability
Cross site scripting in Croogo
Dolibarr ERP and CRM contain XSS Vulnerability
Canvs Canvas XSS Vulnerability
Drupal cross site scripting vulnerability
Drupal cross-site scripting vulnerability
Dolibarr Cross-Site Scripting (XSS) vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.