Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 423
Reset filtersOpenID Connect Authentication (oidc) Typo3 extension Authentication Bypass
baserCMS Cross-site Scripting vulnerability in Site search Feature
baserCMS OS command injection vulnerability in Installer
baserCMS Cross-site Scripting vulnerability in Content Management
Pimcore Host Header Injection in user invitation link
WWBN AVideo recovery notification bypass vulnerability
PrestaShop XSS can be stored in DB from "add a message form" in order detail page (FO)
Dolibarr Improper Input Validation vulnerability
Dolibarr Improper Input Validation vulnerability
baserCMS Code Injection Vulnerability in Mail Form Feature
baserCMS CSRF vulnerability in Content preview Feature
baserCMS Directory Traversal vulnerability in Form submission data management Feature
baserCMS Cross-site Scripting vulnerability in File upload Feature
baserCMS Cross-site Scripting Vulnerability in Favorites Feature
File Upload vulnerability in Dolibarr ERP CRM
Dolibarr allows a remote privileged attacker to execute arbitrary code via a crafted command/script
Cross Site Scripting vulnerability in Dolibarr ERP CRM
Flarum vulnerable to LFI and Blind SSRF via Avatar upload
thorsten/phpmyfaq vulnerable to cross-site scripting
WWBN AVideo command injection vulnerability
guzzlehttp/psr7 < 1.9.1 & 2.4.5 - Interpretation Conflict
NotrinosERP vulnerable to SQL Injection
baserCMS allows any file to be uploaded
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.