Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,070
Reset filtersCross site scripting in yetiforce/yetiforce-crm
Magento Open Source has Improper Access Control vulnerability
Cross site scripting in getkirby/starterkit
PocketMine-MP invalid skin geometry JSON data leading to server crash
CodeIgniter Shield Vulnerable to SameSite Attackers Bypassing the CSRF Protection
NotrinosERP Cross-site Scripting vulnerability
Magento Path Traversal vulnerability
Magento Improper Access Control vulnerability
Magento stored Cross-Site Scripting (XSS) vulnerability
Magento Improper Access Control vulnerability
Magento Improper Authorization vulnerability
Magento stored Cross-Site Scripting (XSS) vulnerability
Magento XML Injection vulnerability in the Widgets Module
Moodle Incorrect Authorization vulnerability
Moodle reflected XSS Vulnerability
Cockpit Content Platform vulnerable to 2FA bypass
ForkCMS XSS via `publish_on_time` parameter
ForkCMS XSS via `publish_on_date` parameter
ForkCMS XSS via `end_date` parameter
ForkCMS stored XSS via `start_date` parameter
Microweber's title parameter in the body of POST request vulnerable to stored XSS
Rank Math SEO <= 1.0.95 - Server-Side Request Forgery
drupal/jquery_ui_checkboxradio - SA-CONTRIB-2022-052
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.