Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,071
Reset filtersArbitrary Code Execution in Processwire
Host header injection in the password reset
SQL Injection in Admin download files as zip
drupal/swiftmailer - SA-CONTRIB-2024-006
drupal/tfa - SA-CONTRIB-2024-003
No permission checks for editing/deleting records with CSV import form
Record titles for restricted records can be viewed if exposed by GridFieldAddExistingAutocompleter
View permissions are bypassed for paginated lists of ORM data
Broken Access Control order API in Shopware
Blind SQL injection in shopware
Drupal core - SA-CORE-2024-001
Cross-site Scripting in Bagisto
Drupal Denial of Service vulnerability
MediaWiki Cargo Extension Cross-site Scripting vulnerability
WWBN AVideo recovery notification bypass vulnerability
WWBN AVideo Insufficient Entropy vulnerbaility
WWBN AVideo Improper Restriction of Excessive Authentication Attempts vulnerability
drupal/typogrify - SA-CONTRIB-2024-002
Pimcore Customer Data Framework Improper Access Control allows unprivileged user to access GDPR extracts
Pimcore Customer Data Framework Improper Access Control allows unprivileged user to access customers duplicates list
Pimcore Ecommerce Framework Bundle Improper Access Control allows unprivileged user to access back-office orders list
juzawebCMS Incorrect Access Control vulnerability
Flarum's logout Route allows open redirects
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.