Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,070
Reset filtersCross-site Scripting in Moodle Chat
Cross site scripting in moodle
Ibexa Kernel's files with blacklisted extensions can be still saved to drafts
Ibexa Kernel's files with blacklisted extensions can be still saved to drafts
Cross-site Scripting in livewire/livewire
[TagAwareCipher] - Decryption Failure (Regex Match)
Gadget chain in Symfony 1 due to vulnerable Swift Mailer dependency
RaspAP Vulnerable to Code Injection via an Unknown Process in File `includes/provider.php`
Bagisto vulnerable to Insecure Direct Object Reference (IDOR)
raspap-webgui vulnerable to denial of service
drupal/registration_role - SA-CONTRIB-2024-015
PocketMine-MP server crash with certain invalid JSON payloads in `LoginPacket` due to dependency vulnerability (3rd time)
PocketMine-MP BookEditPacket crash when inventory slot in the packet is invalid
Remote Code Execution by uploading a phar file using frontmatter
Shopware's session is persistent in Cache for 404 pages
Concrete CMS Stored Cross-site Scripting vulnerability
Sulu grants access to pages regardless of role permissions
Bagist Cross-site Scripting vulnerability
Cockpit CMS Cross-Site Scripting vulnerability
livehelperchat Server-Side Template Injection
Concrete CMS Cross Site Request Forgery (CSRF) vulnerability
Concrete CMS Cross Site Request Forgery (CSRF) vulnerability
Concrete CMS Stored XSS
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.