Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,216
Reset filtersPHPSpreadsheet Library < 2.3.0 - XXE Injection
Minecraft MOTD Parser's HtmlGenerator vulnerable to XSS
Injection of arbitrary HTML/JavaScript code through the media download URL
LibreNMS has Stored Cross-site Scripting vulnerability in "Alert Rules" feature
LibreNMS has Stored Cross-site Scripting vulnerability in "Alert Templates" feature
LibreNMS has Stored Cross-site Scripting vulnerability in "Device Dependencies" feature
Contao affected by remote command execution through file upload
Code Snippet GeSHi plugin in CKEditor 4 has reflected cross-site scripting (XSS) vulnerability
Filament Excel Vulnerable to Path Traversal Attack on Export Download Endpoint
Shopware vulnerable to Server Side Template Injection in Twig using Context functions
Shopware vulnerable to Server Side Template Injection in Twig using deprecation silence tag
Studio 42 elFinder vulnerable to Incorrect Access Control
Pimcore vulnerable to disclosure of system and database information behind /admin firewall
Admidio Vulnerable to RCE via Arbitrary File Upload in Message Attachment
openCart Server-Side Template Injection (SSTI) vulnerability
Silverstripe Framework has a Cross-site Scripting vulnerability with encoded payload
The FIDO2/Webauthn Support for PHP library allows enumeration of valid usernames
PrivateBin allows shortening of URLs for other domains
ShopXO Server-Side Request Forgery Vulnerability
Moodle HTTP authorization header is preserved between "emulated redirects"
Magento Open Source Server-Side Request Forgery (SSRF) vulnerability
zfr authentication adapter did not verify validity of tokens
Zendframework1 potential SQL injection vector using null byte for PDO (MsSql, SQLite)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.