Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,039
Reset filtersIBX-1392: Image filenames sanitization
Impersonation of other users (passing XBOX Live authentication) by theft of logins in PocketMine-MP
Unhandled exception when decoding form response JSON
Authorization Bypass Through User-Controlled Key in LiveHelperChat
Insufficient Session Expiration in Pterodactyl API
Cross-site Scripting in pimcore
Cross-site Scripting in microweber
Exposure of Sensitive Information to an Unauthorized Actor in microweber
Microweber Incorrect Permission Assignment for Critical Resource vulnerability
Code Injection in microweber
Drupal core - SA-CORE-2022-001
drupal/jquery_ui_datepicker - SA-CONTRIB-2022-004
october/system arbitrary code execution
October/System authenticated file write leads to remote code execution
Unchecked validity of Facing values in PlayerActionPacket
Logic error in dolibarr
Access to restricted PHP code by dynamic static class access in smarty
Sandbox Escape by math function in smarty
XSS vulnerability in translations
bookstack is vulnerable to Improper Access Control
Cross-site Scripting in DayByDay CRM
Missing Authorization in DayByDay CRM
Missing Authorization in DayByDay CRM
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.