Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,070
Reset filtersezplatform-admin-ui vulnerable to Cross-Site Scripting (XSS)
GraphQL queries can expose password hashes
Subrion CMS is vulnerable to Cross-Site Scripting (XSS)
FeehiCMS is vulnerable to Cross-Site Scripting (XSS)
Subrion CMS is vulnerable to Cross-Site Scripting (XSS)
Froxlor vulnerable to code injection
Froxlor vulnerable to Code Injection
OpenCart SQL injection vulnerability
TYPO3 Extension femanager vulnerable to Broken Access Control
Tribal Systems Zenario CMS vulnerable to Cross-site Scripting
Centreon vulnerable to SQL Injection
TablePress Plugin vulnerable to Cross-site Scripting
phpCAS authentication library < 1.6.0 - Service Hostname Discovery Exploitation
ProcessWire vulnerable to Cross-Site Request Forgery
ProcessWire vulnerable to Cross-site Scripting
easyii CMS's File Upload Management vulnerable to unrestricted upload
phpMyFAQ vulnerable to reflected Cross-site Scripting
phpMyFAQ vulnerable to stored Cross-site Scripting
phpMyFAQ contains Weak Password Requirements
RCE vulnerability in Pimcore/Mail & Dynamic Text Layout
Prototype pollution in Snowboard framework
Badaso vulnerable to Remote Code Execution via malicious file upload
HyperDown vulnerable to Cross-site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.