Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,216
Reset filtersInsufficient Entropy in PHPServerMon PRNG
PHPServerMon PRNG has Insufficient Entropy
Concrete CMS vulnerable to Cleartext Transmission of Sensitive Information
OpenCart SQL injection vulnerability
phpCAS authentication library < 1.6.0 - Service Hostname Discovery Exploitation
RCE vulnerability in Pimcore/Mail & Dynamic Text Layout
Badaso vulnerable to Remote Code Execution via malicious file upload
Lavalite vulnerable to Arbitrary File Read via Directory Traversal
Kirby CMS vulnerable to user enumeration in the code-based login and password reset forms
Moodle Improper Encoding or Escaping of Output
Drupal core - SA-CORE-2022-016
ReactPHP's HTTP server parses encoded cookie names so malicious `__Host-` and `__Secure-` cookies can be sent
TYPO3 CMS vulnerable to Denial of Service in Page Error Handling
Appwrite Vulnerable to Cross-site Scripting
drupal/commerce_elavon - SA-CONTRIB-2022-053
PocketMine-MP invalid skin geometry JSON data leading to server crash
Rank Math SEO <= 1.0.95 - Server-Side Request Forgery
mezzio-swoole Applications Using Diactoros Vulnerable to HTTP Host Header Attack
Diactoros before 2.11.1 vulnerable to HTTP Host Header Attack
Moodle Stored XSS and blind SSRF possible via SCORM track details
Drupal core - SA-CORE-2022-014
Code injection in grav
Stored XSS via HTML fields in SilverStripe Framework
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.