Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,393
Reset filtersServer-Side Request Forgery (SSRF) in rudloff/alltube
Cross-Site Request Forgery (CSRF) Protection Bypass Vulnerability in CodeIgniter4
Remote CLI Command Execution Vulnerability in CodeIgniter4
EC-CUBE improperly handles HTTP Host header values
Missing server signature validation in OctoberCMS
Improper Authorization in dolibarr/dolibarr
Open Redirect in AllTube
Authenticated remote code execution in October CMS
drupal/govuk_theme - SA-CONTRIB-2022-027
Path traversal in pimcore
Generation of Error Message Containing Sensitive Information in microweber
Exposure of Resource to Wrong Sphere in ezsystems/ezplatform-kernel
Code injection in ezsystems/ezpublish-kernel
Generation of Error Message Containing Sensitive Information in Snipe-IT
Crypt_GPG does not prevent additional options in GPG calls
Improper Privilege Management in Snipe-IT
Drupal core - SA-CORE-2022-003
ThinkPHP Remote Code Execution (RCE) vulnerability
Possible SQL injection in tablelookupwizard Contao Extension
Unrestricted Uploads in Concrete5
Zip slip in Microweber
drupal/custom_breadcrumbs - SA-CONTRIB-2022-024
Generation of Error Message Containing Sensitive Information in microweber
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.