Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,393
Reset filtersBuddyPress <= 5.1.1 - Sensitive Information Disclosure
Drupal core - SA-CORE-2019-011
Drupal core - SA-CORE-2019-010
Drupal core - SA-CORE-2019-009
Information disclosure in the Contao backend
Object injection in cookie driver in phpfastcache
drupal/taxonomy_access_fix - SA-CONTRIB-2019-093
drupal/smart_trim - SA-CONTRIB-2019-092
Internal exception message exposure for login action in Sylius
Symfony Unsafe Cache Serialization Could Enable RCE
Timing attacks might allow practical recovery of the long-term private key
drupal/commerce_ingenico - SA-CONTRIB-2019-089
drupal/sendinblue - SA-CONTRIB-2019-088
drupal/bugsnag - SA-CONTRIB-2019-081
drupal/nexus - SA-CONTRIB-2019-078
Bypass of sitemp access restrictions
Remote code execution via vulnerable Symphony dependecy injection
Information disclosure through processing of external XML entities
Cross-site scripting in Dolibarr
drupal/bat - SA-CONTRIB-2019-074
Incorrect Access Control vulnerability in api-platform/core
Path Traversal in LibreNMS
drupal/create_user_permission - SA-CONTRIB-2019-066
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.