Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,070
Reset filtersIncorrect Authorization in Dolibarr
TeamPass PHP arbitrary file include vulnerability
TeamPass files are available without authentication
Subrion CMS PHP Object Injection
Subrion CMS CSV injection via Export Language
Dolibarr Cross-Site Request Forgery Vulnerability
Dolibarr stored Cross-site Scripting vulnerability
SilverStripe Folders migrated from 3.x may be unsafe to upload to
MediaWiki makeCollapsible allows applying event handler to any CSS selector
Moodle Oauth 2 Insufficiently Protects Against Compromise
FrozenNode Laravel-Administrator unrestricted file upload
CodeIgniter Improper Privilege Management
eZ Publish Kernel and Legacy Unrestricted Upload of File with Dangerous Type
phpMyAdmin SQL Injection
phpMyAdmin SQL injection vulnerability
phpMyAdmin SQL injection vulnerability
phpBB arbitrary CSS injection
MantisBT XSS when uploading an attachment
Moodle reflected Cross-site Scripting (XSS)
Moodle Email media URL tokens were not checking for user status
Moodle open redirect vulnerability
Moodle XSS Vulnerability
Subrion CMS CSRF Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.