Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,070
Reset filtersZend Framework SQL injection vulnerability
LibreNMS vulnerable to a Time-Based Blind SQL injection leads to database extraction
LibreNMS uses Improper Sanitization on Service template name leads to Stored XSS
LibreNMS vulnerable to SQL injection time-based leads to database extraction
TCPDF vulnerable to Regular Expression Denial of Service
Dolibarr Application Home Page has HTML injection vulnerability
Dolibarr vulnerable to Cross-Site Request Forgery
TCPDF Cross-site Scripting vulnerability
Dusk plugin may allow unfettered user authentication in misconfigured installs
Mautic: MST-48 Server-Side Request Forgery in Asset section
Mautic Sensitive Data Exposure due to inadequate user permission settings
Mautic SQL Injection in dynamic Reports
Mautic vulnerable to Relative Path Traversal / Arbitrary File Deletion due to GrapesJS builder
Timber <= 1.23.0 - Authenticated (Admin+) PHP Object Injection
Mautic vulnerable to cross-site scripting in notifications via saving Dashboards
Reportico affected by Incorrect Access Control
Mautic vulnerable to stored cross-site scripting in description field
WWBN AVideo Remote Code Execution
Magento Open Source allows Cross-Site Scripting (XSS)
Magento Open Source allows Improper Input Validation
Contao: Insufficient BBCode sanitizer
Contao: Unencoded insert tags in the frontend
Contao: Cross site scripting in the file manager
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.