Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,070
Reset filtersReflected XSS in Zen Cart before 1.5.7a
Concrete CMS Cross-site Scripting via Survey Blocks
Aimeos Typo3 extension contains Cross-site Scripting vulnerability
Moodle Bypass email verification secret when confirming account registration
Missing permission check in Moodle
Moodle contains Stored XSS via ID number user profile field
ShopXO RCE Vulnerability
Grav CMS Local File Injection
Grav CMS Arbitrary File Deletion
Grav CMS Cross-Site Request Forgery (CSRF)
qcubed PHP object injection
qcubed SQL injection vulnerability in profile.php via the strQuery parameter
qcubed reflected cross-site scripting (XSS) vulnerability
ThinkAdmin Admin Panel Access using Default Credentials
MantisBT XSS in manage_custom_field_update.php
Magento Insufficient Session Expiration
Magento Insecure Direct Object Reference (IDOR) in the product module
Magento cross-site request forgery (CSRF) vulnerability via the GraphQL API
Magento Insufficient Session Expiration
Magento stored cross-site scripting vulnerability in the admin console
Magento stored cross-site scripting (XSS) in the customer address upload feature
Magento improper authorization vulnerability in the integrations module
Magento XML injection in the Widgets module
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.