Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,039
Reset filtersCross Site Scripting in LavaLite CMS
No Restriction of Excessive Authentication Attempts in Firefly III
Improper Input Validation in Centreon Web
drupal/pages_restriction - SA-CONTRIB-2021-024
Incorrect Authorization in TYPO3 extension
Missing Authorization in TYPO3 extension
Missing Authorization in TYPO3 extension
Missing Authorization in TeamPass
Incorrect Authorization in TeamPass
Information Disclosure in User Authentication
Cross-Site Scripting in Backend Grid View
Cross-Site Scripting in Query Generator & Query View
Cross-Site Scripting in Page Preview
drupal/form_mode_manager - SA-CONTRIB-2021-023
Drupal core - SA-CORE-2021-004
Cross-site Scripting in Froala WYSIWYG Editor
SQL injection in pimcore/pimcore
Files or Directories Accessible to External Parties in ether/logs
Cross-site scripting (XSS) from field and configuration text displayed in the Panel
Craft CMS Remote Code Injection
Craft CMS Cross-site Scripting Vulnerability
XSS Injection in Media Collection Title was possible
Cross site scripting in the system log
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.