Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,216
Reset filtersCode Injection in SEOmatic
Improperly checked IDs on itemstacks received from the client leading to server crash in PocketMine-MP
Denial-of-service vulnerability processing large chat messages containing many newlines
XSS in various backend modules due to (un)escaping in JS notification module
phpMyAdmin Cross-Site Request Forgery (CSRF)
TYPO3 Image Processing susceptible to Code Execution
Magento affected by a server-side denial-of-service using a GraphQL field
Grav CMS Local File Injection
Grav CMS Arbitrary File Deletion
ThinkAdmin directory traversal vulnerability
Codiad SSRF Vulnerability
phpBB Server-Side Request Forgery Vulnerability
Shopware vulnerable to SSRF
img_auth.php may leak private extension images into the public cache
EC-CUBE Directory traversal vulnerability
Centreon Sensitive Data Exposure vulnerability
Subrion CMS Cross-Site Request Forgery (CSRF) vulnerability
SEOmatic for CraftCMS allows Server-Side Template Injection
phpMyAdmin SQL Injection
Dolibarr ERP and CRM contain XSS Vulnerability
SEOmatic for CraftCMS allows Server-Side Template Injection
phpMyAdmin SQL injection in user accounts page
Magento 2 Community Edition RCE Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.