Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,039
Reset filtersMissing Authorization in DayByDay CRM
Open Redirect in Grav
Wechat-php-sdk is affected by a Cross Site Scripting vulnerability.
Uncapped length of skin data fields submitted by players
Book page text, count, and author/title length is not limited in PocketMine-MP
Open redirect in shopware
Insufficient Session Expiration in shopware
Sandbox bypass in Latte templates
OS Command Injection in Laravel Framework
Deserialization of Untrusted Data in Codeigniter4
showdoc is vulnerable to Generation of Error Message Containing Sensitive Information
Injection in UserFrosting
Cross-site Scripting in Netgen Tags Bundle
showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
invoiceninja is vulnerable to Cross-site Scripting
elgg is vulnerable to Cross-site Scripting
Unrestricted Upload of File with Dangerous Type in unisharp/laravel-filemanager
Incorrect Authorization in latte/latte
Cross-Site Request Forgery in Moodle
XSS vulnerability on email template preview page
Client-Side JavaScript Prototype Pollution in oro/platform
Cross-site Scripting in pimcore
livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.