Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,039
Reset filtersInsecure Inherited Permissions in neoan3-apps/template
Cross-site Scripting in LibreNMS
Unrestricted Uploads in Concrete5
Cross-site scripting vulnerability in TinyMCE plugins
XML External Entity vulnerability in MODX CMS
Cross-Site Scripting in grav
Cross-Site Request Forgery in firefly-iii
Cross-Site Request Forgery in firefly-iii
Authenticated Stored XSS in shopware/shopware
Cross Site Scripting in Microweber
Showdoc File Upload Vulnerability
Cross-site scripting in forkcms
pterodactyl/panel CSRF allowing an external page to trigger a user logout event
Cross-site scripting vulnerability in TinyMCE
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in sulu/sulu
Cross-site Scripting in snipe-it
Exposure of Sensitive Information to an Unauthorized Actor in Moodle
Cross-Site Request Forgery in snipe-it
Open Redirect in firefly-iii
Cross-site Scripting in snipe-it
CSV Injection Vulnerability
drupal/loft_data_grids - SA-CONTRIB-2021-043
SilverStripe GraphQL Server permission checker not inherited by query subclass.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.