Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,406
Reset filtersLibreNMS has a Stored XSS vulnerability in its Alert Transport name field
Customer account takeover via email in PrestaShop Checkout module for PrestaShop
Magento vulnerable to stored Cross-Site Scripting (XSS)
Magento provides incorrect authorization through a security feature bypass
Magento vulnerable to privilege escalation due to incorrect authorization
Magento vulnerable to stored Cross-Site Scripting (XSS)
Magento allows incorrect authorization
LibreNMS is vulnerable to Reflected-XSS in `report_this` function
Bagisto is vulnerable to XSS through Admin Panel's product creation path
Alt Redirect: Potential Authentication Bypass by Spoofing through query-string stripping logic flaw
drupal-pattern-lab/unified-twig-extensions is vulnerable to XXS
Melis Platform CMS Unauthenticated File Upload Leading to RCE
phpMyFAQ duplicate email registration allows multiple accounts with the same email
Dolibarr vulnerable to RCE via the computed field parameter
Auth0 Symfony SDK Does Not Properly Handle File Types in Bulk User Import
laravel-auth0 SDK Does Not Properly Handle File Types in Bulk User Import
auth0-PHP SDK Does Not Properly Handle File Types in Bulk User Import
Star Citizen EmbedVideo Extension Stored XSS through wikitext caused by usage of non-reserved data attributes
Subrion CMS: Authenticated administrators are able to gain escalated access through Run SQL Query tool
Shopware: Reflective Cross Site-Scripting (XSS) in CMS components
TinyEnv: Inline comments not stripped properly in .env values
Maho is Vulnerable to Authenticated Remote Code Execution via File Upload
TYPO3 CMS exposes sensitive information in an error message
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.