Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,039
Reset filtersTYPO3 SQL injection vulnerability on the backend
TYPO3 Arbitrary Code Execution vulnerability on the backend
TYPO3 Open Redirection vulnerability on the backend
TYPO3 is vulnerable to Cross-Site Scripting (XSS) on the backend
MantisBT Insufficient Session Expiration cookie string not reset after logout
Drupal core - SA-CORE-2022-009
Drupal core - SA-CORE-2022-008
Cross-site Scripting in snipe-it
Cross-site Scripting in Pimcore
MantisBT CSV Injection unprivileged user access in csv_export.php
MantisBT vulnerable to XSS due to improper escape in manage_plugin_page.php and manage_plugin_uninstall.php
HTML Injection in Froxlor
SQL Injection in Pimcore
Persistent Cross-site Scripting vulnerability in PrivateBin
RCE in Studio-42 elFinder on Windows before 2.1.61
Code Injection in Bolt CMS
SQL Injection in Pimcore
Improper Neutralization of Formula Elements in a CSV File in Kimai 2
elFinder Unrestricted File Upload vulnerability
HTTP Proxy header vulnerability
Files or Directories Accessible to External Parties in Adminer
Server side request forgery in LiveHelperChat
Weak password hash in LiveHelperChat
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.