Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,071
Reset filtersWallabag user can delete own API client unintentionally
Craft CMS vulnerable to Remote Code Execution via validatePath bypass
Cockpit Cross-site Scripting vulnerability
Cockpit Cross-site Scripting vulnerability
Cockpit Cross-site Scripting vulnerability
Cockpit Cross-site Scripting vulnerability
Cockpit Cross-site Scripting vulnerability
Flarum vulnerable to LFI and Blind SSRF via Avatar upload
LibreNMS Cross-site Scripting vulnerability
Cockpit Cross-site Scripting vulnerability
ThinkCMF Cross-site Scripting Vulnerability
Gila CMS Cross-site Scripting Vulnerability
Froxlor vulnerable to business logic errors
PrestaShop file deletion via CustomerMessage
PrestaShop file deletion via attachment API
Magento Open Source allows Incorrect Authorization
Magento Open Source allows Improper Neutralization of Special Elements Used
Magento Open Source allows XML Injection
Possible XSS injection through Validate::isCleanHTML method
SQL manager vulnerability (potential RCE)
[CVE-2023-39529][CVE-2023-39530] path traversal: file deletion in the backoffice
Full SQL injection possible in search product in backoffice
Reading a file through path traversal & Remote Code Execution via unsafe deserialization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.