Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,039
Reset filtersUnrestricted Upload of File with Dangerous Type in MODX Revolution
Logic error in dolibarr/dolibarr
SQL injection in francoisjacquet/rosariosis
Cross site scripting in francoisjacquet/rosariosis
File upload restriction bypass in Zenario CMS
Cross site scripting in francoisjacquet/rosariosis
Arbitrary file delete in ectouch/ectouch
EC-CUBE improperly handles HTTP Host header values
Multi-Factor Authentication issue in Laravel Fortify
Missing server signature validation in OctoberCMS
Insertion of Sensitive Information Into Debugging Code in Microweber
Insecure Storage of Sensitive Information in Microweber
Cross-site Scripting in Microweber
Improper Authorization in dolibarr/dolibarr
Open Redirect in AllTube
Authenticated remote code execution in October CMS
drupal/govuk_theme - SA-CONTRIB-2022-027
drupal/entity_reference_tree - SA-CONTRIB-2022-026
Path traversal in pimcore
Business Logic Errors in microweber
SSRF in Kitodo.Presentation
Cross-site Scripting in microweber
Unrestricted Upload of File with Dangerous Type in showdoc
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.