Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,406
Reset filtersLibreNMS has Stored Cross-site Scripting vulnerability in "Alert Transports" feature
LibreNMS has Stored Cross-site Scripting vulnerability in "Device Group" Name
LibreNMS has Stored Cross-site Scripting vulnerability in "Alert Rules" feature
LibreNMS has Stored Cross-site Scripting vulnerability in "Alert Templates" feature
LibreNMS has Stored Cross-site Scripting vulnerability in "Device Dependencies" feature
starcitizentools/citizen-skin vulnerable to stored, self-XSS in the "real name" field
Filament has unvalidated ColorColumn and ColorEntry values that can be used for Cross-site Scripting
IDOR vulnerability in account profile page
Cross site scripting in Concrete CMS
Mautic allows users enumeration due to weak password login
Mautic has insufficient authentication in upgrade flow
Mautic has an XSS in contact tracking and page hits report
Mautic vulnerable to XSS in contact/company tracking (no authentication)
Mautic vulnerable to Cross-site Scripting (XSS) - stored (edit form HTML field)
Mautic vulnerable to Improper Access Control in UI upgrade process
Kimai has an XXE Leading to Local File Read
Wire UI has a JS XSS Vulnerability on route /wireui/button?label=Content
powermail TYPO3 extension has Insecure Direct Object Reference
drupal/seckit - SA-CONTRIB-2024-039
auditor-bundle vulnerable to Cross-site Scripting because name of entity does not get escaped
Craft CMS vulnerable to stored XSS in breadcrumb list and title fields
drupal/freelinking - SA-CONTRIB-2024-034
Pimcore includes vulnerable PHPOffice/PhpSpreadsheet
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.