Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,404
Reset filtersCross-site Scripting in kimai2
Cross-Site Request Forgery allowing sending of test emails and generation of node auto-deployment keys
HTML comments vulnerability allowing to execute JavaScript code
drupal/openid_connect_windows_aad - SA-CONTRIB-2021-044
Cross-site scripting (XSS) from image block content in the site frontend
Cross-site scripting (XSS) from writer field content in the site frontend
Cross-site Scripting in pegasus/google-for-jobs
Unrestricted access to predictable file paths in hov/jobfair
Cross-site scripting vulnerability in TinyMCE plugins
Showdoc File Upload Vulnerability
Cross-site scripting in forkcms
pterodactyl/panel CSRF allowing an external page to trigger a user logout event
Cross-site scripting vulnerability in TinyMCE
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in sulu/sulu
Exposure of Sensitive Information to an Unauthorized Actor in Moodle
CSV Injection Vulnerability
Sylius PayPal Plugin allows unauthorized access to Credit card form, exposing payer name and not requiring 3DS
Deleted Admin Can Sign In to Admin Interface
Cross-Site-Request-Forgery in Backend
HTTP Host Header Injection
Pterodactyl Panel vulnerable to authentication bypass due to improper user-provided security token verification
Cross-site Scripting in LaraCMS
SQL Injection in topthink/thinkphp
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.