Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,068
Reset filtersMoodle Cross-site Scripting in the Course summary filter of the Add a new course
phpMyAdmin CSRF vulnerability allowing arbitrary SQL execution
GeniXCMS Cross-site scripting (XSS) vulnerability
User Plugin for October CSS Allows XSS
Dolibarr Cross-site scripting (XSS) vulnerability
Joomla! XSS Vulnerability
Moodle Portfolio forum caller class allows a user to download any file
Moodle Portfolio script allows instantiation of class chosen by user
OpenCart Path Traversal
OpenCart Path Traversal
SimpleSAMLphp Session fixation issue and authentication bypass in the authcrypt module
Dolibarr SQL injection vulnerability
Pagekit Stored Cross-site Scripting
phpMyAdmin server-side request forgery (SSRF)
phpMyAdmin Denial of service (DOS) attack in transformation feature
phpMyAdmin DoS Vulnerability
phpMyAdmin PHP code injection
Converse.js Exposure of Sensitive Information
nZEDb Cross-site Scripting (XSS) in the 404 error page
Symfony Authentication Bypass
Yii2-StateMachine extension for Yii2 XSS Vulnerability
Symfony Authentication Bypass
CodeIgniter Session Fixation Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.