Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,404
Reset filtersRemote Code Execution in Contao Managed Edition
Insufficient Session Expiration in Admidio
Improper Privilege Management in Open Web Analytics
Possibility for Denial of Service by overwriting PHP files with language exports
Improperly checked metadata on tools/armour itemstacks received from the client
Open Redirect
NaN/INF in serverbound movement packets can crash clients and servers
Cross-site Scripting in Pimcore
Cross-site Scripting in Pimcore
Cross-site Scripting in Pimcore
Stored Cross-site Scripting in Microweber
Stored Cross-site Scripting in showdoc
DQL injection through sorting parameters blocked
Cross-site Scripting in ShowDoc
Cross-site Scripting in ShowDoc
Cross-site Scripting in ShowDoc
Cross-site Scripting in ShowDoc
Cross-site Scripting in ShowDoc
Improper sanitize of SVG files during content upload ('Cross-site Scripting') in sylius/sylius
Insufficient Session Expiration in Sylius
Sensitive Information Exposure in Sylius
Improper Restriction of Rendered UI Layers or Frames in Sylius
Cross-site Scripting in ShowDoc
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.