Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,071
Reset filtersInformation Disclosure due to Out-of-scope Site Resolution
Cross site scripting via input unit widget
Pimcore vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
Pimcore vulnerable to SQL Injection in Dataobjects sorting
Pimcore Cross-site Scripting vulnerability
Pimcore Cross-site Scripting vulnerability
Cockpit CMS vulnerable to incorrect access control
Cockpit CMS Cross-Site Request Forgery vulnerability
grav Server-side Template Injection (SSTI) mitigation bypass
Easy!Appointments Improper Access Control vulnerability
Admidio vulnerable to Unrestricted Upload of File with Dangerous Type
zenstruck/collection passing callable string to EntityRepository::find() and query()
PocketMine-MP vulnerable to server crash using badly formatted sign NBT in BlockActorDataPacket
Pimcore SQL Injection vulnerability
Froxlor vulnerable to Improper Encoding or Escaping of Output
ImpressCMS Cross-site Scripting vulnerability
drupal/tfa - SA-CONTRIB-2023-030
Pimcore admin UI vulnerable to Cross-site Scripting in 2 factor authentication setup page
Orchid Deserialization of Untrusted Data vulnerability leads to Remote Code Execution
Pimcore Customer Management Framework vulnerable to Improper Authorization in Rules Controller
TeamPass Cross-site Scripting vulnerability
Wallabag vulnerable to Allocation of Resources Without Limits or Throttling
TeamPass information exposure vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.