Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,039
Reset filtersOpen redirect in wwbn/avideo
Cross-site Scripting in TastyIgniter
XSS Injection Vulnerability
Buffer length underflow in LoginPacket causing unchecked exceptions to be thrown
Remote code execution in Subrion
Cross-Site Request Forgery in YOURLS
Remote code injection in dompdf/dompdf
Cross-site Scripting in craftcms/cms
SQL injection in pagekit/pagekit
Automatic named constructor discovery in Valinor
Improper Certificate Validation in node-sass affects eZ Platform
SQL Injection in Dolibarr
Access Control vulnerability in Dolibarr
Unrestricted Upload of File with Dangerous Type in WPanel 4
Type Confusion in LiveHelperChat
Old sessions not blocked by login enable function in Snipe-IT
Path Traversal within joomla/archive tar class
Path Disclosure within joomla/filesystem class
Cross-site Scripting (XSS) within joomla/filter class
Variable Tampering within joomla/input class
Cross-site Scripting in Parsedown
drupal/cleantalk - SA-CONTRIB-2022-032
Firebase PHP-JWT < 6.0.0 - Algorithm Confusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.