Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,070
Reset filtersFroxlor Improper Authorization vulnerability
Ariadne Component Library vulnerable to Server-Side Request Forgery
Froxlor vulnerable to Cross-Site Request Forgery
Froxlor vulnerable to Argument Injection
Harvest Chosen vulnerable to Cross-site Scripting
Microweber vulnerable to unrestricted malicious uploads
php-mod/curl allows Cross-site Scripting
Snipe-IT allows attackers to check whether a user account exists
Snipe-IT vulnerable to Cross Site Scripting for View Assigned Assets
ThinkPHP Framework vulnerable to remote code execution
CodeIgniter4 Potential Session Handlers Vulnerability
CodeIgniter4 allows spoofing of IP address when using proxy
Microweber vulnerable to Stored Cross-Site Scripting
Microweber vulnerable to Reflected Cross-site Scripting
SilverStripe Subsite weakens file permissions
laravel-jqgrid vulnerable to SQL Injection
FeehiCMS Cross Site Scripting vulnerability
FeehiCMS Cross Site Scripting vulnerability
FeehiCMS Cross Site Scripting vulnerability
FeehiCMS Cross Site Scripting vulnerability
FeehiCMS Unrestricted Upload vulnerability
FeehiCMS Cross Site Scripting vulnerability
FeehiCMS Cross Site Scripting vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.