Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,070
Reset filtersCross-site Scripting in RosarioSIS
Cross-site Scripting in Dolibarr
Cross-Site Request Forgery in easyii CMS
Improperly checked IDs on itemstacks received from the client leading to server crash in PocketMine-MP
Failed payment recorded has completed in Silverstripe Omnipay
Cross-site Scripting in FacturaScripts
Command injection in librenms
Cross site scripting in librenms
Neos CMS vulnerable to XSS in various backend modules
Login timing attack in ibexa/core
Login timing attack in ezsystems/ezpublish-kernel
Login timing attack in ezsystems/ezplatform-kernel
Possible cross-site scripting attack via unsanitized SVG files in FoF Upload
Cross-site Scripting vulnerability in Mautic's tracking pixel functionality
Denial-of-service vulnerability processing large chat messages containing many newlines
PHP Code Injection by malicious block or filename in Smarty
XSS in various backend modules due to (un)escaping in JS notification module
Drupal core - SA-CORE-2022-010
drupal/apigee_edge - SA-CONTRIB-2022-045
drupal/entity_browser_block - SA-CONTRIB-2022-044
drupal/embed - SA-CONTRIB-2022-042
SQL injection in helloxz/imgurl
Path Traversal in FileGator
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.