Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,216
Reset filtersMagento Open Source allows Server-Side Request Forgery (SSRF)
Magento Open Source allows Server-Side Request Forgery (SSRF)
PocketMine-MP vulnerable to improperly checked dropped item count leading to server crash
PocketMine-MP vulnerable to server crash with certain invalid JSON payloads in `LoginPacket` due to vulnerable dependency
PocketMine MP vulnerable to uncontrolled resource consumption via mismatched type of 'InventoryTransactionPacket'
Craft CMS vulnerable to Remote Code Execution via unrestricted file extension
ReactPHP's HTTP server continues parsing unused multipart parts after reaching input field and file upload limits
WWBN AVideo command injection vulnerability
Pimcore Path Traversal Vulnerability in AdminBundle/Controller/Reports/CustomReportController.php
Remote code injection in wwbn/avideo
Arbitrary File Read in Admin JS CSS files
Path Traversal in Asset "import from server" option
SQL Injection in Admin Translations API
SQL Injection in Translation Export API
SQL Injection in Admin Search Find API
Improper Input Validation in nyholm/psr7
Improper header validation in httpsoft/http-message
Drupal core - SA-CORE-2023-005
Insecure header validation in slim/psr7
guzzlehttp/psr7 < 1.9.1 & 2.4.5 - Interpretation Conflict
yuan1994 tpAdmin vulnerable to Server-Side Request Forgery
Microweber vulnerable to command injection
Uvdesk remote code execution vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.