Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,070
Reset filtersMoodle Session Fixation vulnerability
Moodle vulnerable to Server-Side Request Forgery
Moodle SQL Injection vulnerability
Moodle SQL Injection vulnerability
Remote code execution in Funadmin
uvdesk/community-skeleton vulnerable to Stored Cross-site Scripting
Complianz - GDPR/CCPA Cookie Consent <= 6.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Wallabag Improper Authorization vulnerability
Craft CMS Stored Cross-site Scripting Injection Vulnerability
phpseclib Infinite Loop vulnerability
Cockpit Uses Platform-Dependent Third Party Components
Pimcore vulnerable to Cross Site Scripting in Email Blacklist
Pimcore vulnerable to Cross Site Scripting in image/video thumbnail config
Pimcore vulnerable to Cross Site Scripting in Documents Link Editable
drupal/group_forum - SA-CONTRIB-2023-008
drupal/better_social_sharing_buttons - SA-CONTRIB-2023-006
api-platform/core's secured properties may be accessible within collections
Microweber Cross-site Scripting vulnerability
laravel-admin has Arbitrary File Upload vulnerability
TeamPass External Control of File Name or Path vulnerability
Pimcore vulnerable to Cross-site Scripting
frp_form_answers allows Cross-site Scripting
Froxlor Cross-Site Request Forgery vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.