Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,068
Reset filtersphpMyAdmin Improper Authentication
Moodle Logged in users could view all calendar events
Moodle XSS Vulnerability
Moodle XSS Vulnerability
TYPO3 femanager extension allows remote frontend users to modify or delete records of other frontend users
Wizkunde SAMLBase SAML Bypass
Cross-site Scripting in facturascripts
Privilege escalation in easyappointments
Incorrect Authorization in microweber
Improper account password reset in Craft CMS
Deserialization of Untrusted Data in topthink/framework
Unrestricted Upload of File with Dangerous Type in yetiforce-crm
WP-Stateless – Google Cloud Storage <= 3.1.1 - Authenticated (Admin+) Stored Cross-Site Scripting
PrestaShop Stored Cross-Site Scripting Vulnerability
Symfony Host Header Injection vulnerability in the HttpFoundation component
Symfony collectionCascaded and collectionCascadedDeeply fields security bypass
Cross-site Scripting in FacturaScripts
Microweber vulnerable to cross-site scripting (XSS)
MantisBT vulnerable to XSS via unescaped output in browser_search_plugin.php
Cross-site Scripting in Microweber
drupal/quick_node_clone - SA-CONTRIB-2022-038
drupal/image_field_caption - SA-CONTRIB-2022-036
drupal/dfp - SA-CONTRIB-2022-035
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.