Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 851
Reset filterstarteaucitron.js for WordPress < 0.3.0 - Authenticated (Author+) Stored Cross-Site Scripting
Connect-CMS information that is restricted to viewing is visible
Pimcore Admin Classic Bundle allows user enumeration
TYPO3 DB Check Module vulnerable to Cross-Site Request Forgery
TYPO3 Scheduler Module vulnerable to Cross-Site Request Forgery
TYPO3 Indexed Search Module vulnerable to Cross-Site Request Forgery
TYPO3 Form Framework Module vulnerable to Cross-Site Request Forgery
TYPO3 Extension Manager Module vulnerable to Cross-Site Request Forgery
TYPO3 Cross-Site Request Forgery in Dashboard Module
TYPO3 Cross-Site Request Forgery in Backend User Module
TYPO3 Cross-Site Request Forgery in Log Module
Extension:TabberNeue vulnerable to Cross-site Scripting
lgsl Stored Cross-Site Scripting vulnerability
phpMyFAQ Generates an Error Message Containing Sensitive Information if database server is not available
SimpleSAMLphp SAML2 has an XXE in parsing SAML messages
SimpleSAMLphp xml-common XXE vulnerability
drupal/tarte_au_citron - SA-CONTRIB-2024-064
LibreNMS has an Authenticated OS Command Injection
Craft CMS vulnerable to Potential Remote Code Execution via missing path normalization & Twig SSTI
Local File System Validation Bypass Leading to File Overwrite, Sensitive File Access, and Potential Code Execution
Filament has exported files stored in default (`public`) filesystem if not reconfigured
YesWiki Uses a Broken or Risky Cryptographic Algorithm
baserCMS has a Cross-site Scripting (XSS) Vulnerability in Edit Email Form Settings Feature
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.