Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,068
Reset filtersTeamPass stored cross-site scripting (XSS) vulnerability
GeniXCMS XSS Vulnerability
Typo3 Host Header Spoofing Vulnerability
Typo3 XSS Vulnerabilities
TYPO3 Color Picker Wizard component allows remote authenticated editors to execute arbitrary PHP code
Dolibarr SQL injection vulnerability in comm/multiprix.php
Dolibarr SQL injection vulnerability in fourn/index.php
Dolibarr SQL injection vulnerability in adherents/subscription/info.php
Dolibarr sensitive information disclosure
Fork CMS XSS via Highlight Parameter
Passbolt API is vulnerable to XSS in the url field on the password workspace grid and sidebar
Fork CMS XSS Vulnerability
Dolibarr ERP and CRM contain XSS Vulnerability
phpBB Server-Side Request Forgery (SSRF)
Stored XSS in LavaLite 5.2.4
QuickApps CMS Cross-site Scripting
XXE Vulnerability in XMLBundle 0.1.7
eZ Publish Cross-site Scripting (XSS) vulnerability
Shopware XSS Vulnerability
Magento Cross-Site Request Forgery (CSRF)
Smarty PHP code injection
Moodle Privilege escalation in quiz web services
Moodle XSS Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.