Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,070
Reset filtersSubrion CMS CSRF Vulnerability
Bookstack Cross-site Scripting vulnerability
YOURLS Stored Cross Site Scripting (XSS)
Magento 2 Community Edition XSS Vulnerability
phpMyAdmin SQL injection vulnerability
phpMyAdmin Cross-site Scripting (XSS)
PyroCMS Vulnerable to CSRF
PyroCMS Vulnerable to CSRF
Froala WYSIWYG Editor XSS Vulnerability
MantisBT unauthorized users able to access private files
MantisBT HTML Injection vulnerability
MantisBT XXS where a Custom Field with a crafted Regular Expression property is used
MediaWiki Special:UserRights exposes the existence of hidden users
MediaWiki Cross-site Scripting (XSS) vulnerability
MediaWiki Cross-site Scripting (XSS) vulnerability
MediaWiki Cross-site Scripting (XSS) vulnerability
OATHAuth extension in MediaWiki is not implementing rate limit
MediaWiki Cross-site Scripting (XSS) vulnerability
DotPlant2 Improper Restriction of XML External Entity Reference
ThinkAdmin directory traversal vulnerability
Guard bypass in Eloquent models affecting Laravel illuminate database component
silverstripe-advancedreports vulnerable to XSS
Dolibarr Unrestricted Upload of File with Dangerous Type
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.