Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,071
Reset filtersContao Cross-site Scripting vulnerabililty
Yii2 allows attackers to execute any local .php file via a relative path in the view parameter
Composer allows cache poisoning from other projects built on the same host
Drupal core - SA-CORE-2023-006
File Upload vulnerability in Dolibarr ERP CRM
Dolibarr allows a remote privileged attacker to execute arbitrary code via a crafted command/script
Cross Site Scripting vulnerability in Dolibarr ERP CRM
Cross site scripting in librenms
Neos CMS Cross Site Scripting vulnerability
Magento Open Source affected by Improper Input Validation
LibreNMS Code Injection vulnerability
LibreNMS Cross-site Scripting vulnerability
LibreNMS Cross-site Scripting vulnerability
LibreNMS Cross-site Scripting vulnerability
LibreNMS Cross-site Scripting vulnerability
LibreNMS Cross-site Scripting vulnerability
Froala Editor Cross-site Scripting vulnerability
PocketMine-MP server crash with certain invalid JSON payloads in `LoginPacket` due to dependency vulnerability (again)
PocketMine-MP server crash due to incorrect EC curve used for LoginPacket identityPublicKey
drupal/mail_login - SA-CONTRIB-2023-045
Craft CMS Remote Code Execution vulnerability
Cecil Path Traversal vulnerability
Cecil Cross-site Scripting vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.