Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,039
Reset filtersServer-Side Request Forgery vulnerability in concrete5
Cross-site Scripting in Limesurvey
SQL Injection in medoo
Improper Certificate Validation in Heartland & Global Payments PHP SDK
Origin Validation Error in Magento 2
Critical severity vulnerability in Ignition
Stored XSS with custom URLs in PrestaShop module ps_linklist
Sylius PayPal Plugin allows unauthorized access to Credit card form, exposing payer name and not requiring 3DS
Deleted Admin Can Sign In to Admin Interface
Cross-Site-Request-Forgery in Backend
HTTP Host Header Injection
Improper escaping of command arguments on Windows leading to command injection
Pterodactyl Panel vulnerable to authentication bypass due to improper user-provided security token verification
Cross-site scripting in demos/demo.mysqli.php in getID3
Cross-site scripting in application/controllers/dropbox.php in JustWriting
Cross-site Scripting in LaraCMS
Cross-Site Request Forgery in GilaCMS
Cross-site Scripting in GilaCMS
Cross-site Scripting in GilaCMS
SQL Injection in topthink/thinkphp
Improper Access Control in Webauthn Framework
Reliance on Cookies without Validation and Integrity Checking in getgrav/grav
Cross-Site Request Forgery in firefly-iii
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.