Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,071
Reset filtersPimcore Privilege Defined With Unsafe Actions vulnerability
Admidio vulnerable to Cross-site Scripting
TeamPass vulnerable to Improper Access Control
TeamPass vulnerable to stored Cross-site Scripting
TeamPass vulnerable to stored Cross-site Scripting
TeamPass vulnerable to stored Cross-site Scripting
PocketMine MP vulnerable to uncontrolled resource consumption via mismatched type of 'InventoryTransactionPacket'
Dcat-Admin vulnerable to Stored Cross-site Scripting
nilsteampassnet/teampass vulnerable to cross-site scripting
drupal/addtoany - SA-CONTRIB-2023-019
drupal/addtoany - SA-CONTRIB-2023-018
drupal/consent_popup - SA-CONTRIB-2023-017
drupal/iubenda_integration - SA-CONTRIB-2023-016
thorsten/phpmyfaq vulnerable to cross-site scripting
thorsten/phpmyfaq vulnerable to cross-site scripting
Dolibarr vulnerable to remote code execution via uppercase manipulation
Stored cross site scripting in Craft CMS
Craft CMS stored XSS in indexedVolumes
Craft CMS stored XSS in review volume
Craft CMS XSS in RSS widget feed
CraftCMS stored XSS in Quick Post widget error message
Pimcore customers' list user password hash is disclosed
Code injection in nilsteampassnet/teampass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.