Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,039
Reset filtersCross-site Scripting in microweber
SQL injection in Moodle
Insufficient user authorization in Moodle
Insufficient user authorization in Moodle
Cross Site Request Forgery in Moodle
Cross-site Scripting in Crater Invoice
Server Side Twig Template Injection
Cross-site Scripting in grav
Cross-Site Request Forgery in yetiforce
Authentication Bypass in ADOdb/ADOdb
Cross-site Scripting Vulnerability in CodeIgniter4
Mustache remote code injection vulnerability
Cross-site Scripting in Pimcore
Missing Authorization in Crater Invoice
Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked call into the proto file's name during generation of the resulting error me
SQL Injection in showdoc
Cross-site Scripting in pimcore
Business Logic Errors in pimcore
Improper Access Control in snipe-it
Cross-Site Request Forgery (CSRF) in livehelperchat
Cross-Site Request Forgery (CSRF) in livehelperchat
drupal/private_taxonomy - SA-CONTRIB-2022-014
drupal/image_export_import - SA-CONTRIB-2022-021
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.