Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,070
Reset filtersdrupal/next - SA-CONTRIB-2022-054
RosarioSIS before 10.1 vulnerable to Improper Handling of Length Parameter Inconsistency
FeehiCMS has an arbitrary file upload vulnerability
francoisjacquet/rosariosis vulnerable to Cross-Site Scripting (XSS)
PrestaShop Product Comments Cross-site Scripting vulnerability
LibreNMS vulnerable to Cross-Site Scripting (XSS)
LibreNMS vulnerable to Cross-Site Scripting (XSS)
Cross-site scripting from content entered in the tags and multiselect fields
snipe-it vulnerable to cross-site scripting (XSS)
Pagekit CMS cross-site scripting in Markdown text box where articles are edited
Subrion CMS 4.2.1 vulnerable to cross-site scripting in admin panel
Cross-site scripting from dynamic options in the multiselect field
Froxlor vulnerable to Cross-Site Request Forgery (CSRF)
Insufficient Session Expiration in snipe/snipe-it
exceedone/exment and exceedone/laravel-admin Cross-site Scripting vulnerability
exceedone/exment and exceedone/laravel-admin SQL Injection vulnerability
Kirby CMS 2.5.12 Cross-site Scripting
Kirby CMS 2.5.12 Cross-site Request Forgery
drupal/commerce_elavon - SA-CONTRIB-2022-053
Pimcore Cross-site Scripting (XSS)
Missing password strength check in notrinos/notrinos-erp
Cross site scripting in yetiforce/yetiforce-crm
Cross site scripting in yetiforce/yetiforce-crm
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.