Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,070
Reset filtersFeehiCMS vulnerable to Cross-Site scripting via crafted payload
Moodle Improper Authentication
Moodle type juggling vulnerability
Moodle Incorrect Authorization
Moodle Exposure of Sensitive Information to an Unauthorized Actor
Moodle Improper Encoding or Escaping of Output
Drupal core - SA-CORE-2022-016
EC-CUBE DOM-based cross-site scripting vulnerability
EC-CUBE Directory traversal vulnerability
Centreon contains cross-site scripting vulnerability via esc_name parameter
Centreon SQL Injection vulnerability via esc_name parameter
Dompdf allows remote file inclusion because URI validation failure does not halt font registration
ICEcoder vulnerable to Path Traversal
Pimcore vulnerable to cross site scripting
Craft CMS Cross-site Scripting vulnerability
Microweber Cross-site Scripting can result in redirection to a malicious site
YetiForce CRM vulnerable to stored Cross-site Scripting via SlaPolicy module
YetiForce CRM vulnerable to stored Cross-site Scripting via WorkFlow module
YetiForce CRM vulnerable to stored Cross-site Scripting via LayoutEditor module
YetiForce CRM vulnerable to stored Cross-site Scripting via WidgetsManagement module
Microweber vulnerable to HTML Injection in create tag functionality
Pagekit vulnerable to Unrestricted Upload of File with Dangerous Type
LibreNMS stored Cross-site Scripting via Schedule Maintenance `Title` parameter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.