Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,068
Reset filtersAn attacker can execute malicious javascript in Live Helper Chat
Subrion CMS Cross-site Scripting (XSS) vulnerability in the `contact us` plugin
Improper Authentication in moodle
Missing authorization in Moodle
Object state limitation has no effect
Object state limitation has no effect
Access control issue in ezsystems/ezpublish-kernel
Improper Access Control in snipe/snipe-it
Cross site scripting in FacturaScripts
URL Rewrite vulnerability in multiple zendframework components
Multiple valid tokens for password reset in Shopware
Malfunction of CSRF token validation in Shopware
Reflected Cross-site Scripting in Shopware storefront
Cross-site Scripting in microweber
Stored cross site scripting in getgrav/grav
Cross site scripting in facturascripts
Command injection in czproject/git-php
Stored cross-site scripting in Snipe-IT
PrestaShop XSS Vulnerability
Contao core SQL Injection Vulnerability
Moodle included private user files in course backups
Moodle default permissions too permissive
Moodle backs up private files
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.