Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,070
Reset filtersMagento stored cross-site scripting vulnerability
Moodle Persistent Cross-site Scripting (XSS)
Magento stored cross-site scripting vulnerability in the customer address upload feature
Mautic stored Cross-site Scripting (XSS)
Magento Broken authentication and session managememt
Magento remote code execution vulnerability
TeamPass Cross-site Scripting (XSS) vulnerability
Magento 2 Community Edition SQLi Vulnerability
phpMyAdmin Cross-Site Request Forgery (CSRF)
Bolt Cross-site Scripting (XSS) via an image's alt or title field
laracom Cross-site Scripting
TYPO3 Vulnerable to Insecure Deserialization
Typo3 Cross-Site Scripting in Link Handling
Shopware Cross-site Scripting Vulnerability
TYPO3 Image Processing susceptible to Code Execution
EC-CUBE Cross-site request forgery (CSRF) vulnerability
Moodle contains CSRF vulnerability
Moodle Insecure direct object reference (IDOR) in a calendar web service
Dolibarr remote PHP code execution
Dolibarr ERP and CRM contain XSS Vulnerability
Foxlor cross-site scripting (XSS) vulnerability
Unrestricted File Upload vulnerability in Firefly III
Magento Open Source allows Cross-Site Request Forgery (CSRF)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.