Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,068
Reset filtersMantisBT lacks verification when changing a user's email address
MantisBT Vulnerable to Denial-of-Service (DoS) via Excessive Note Length
MantisBT vulnerable to authentication bypass for some passwords due to PHP type juggling
Statamic Vulnerable to Superadmin Account Takeover via Stored Cross-Site Scripting and Lack of Proper X-CSRF-TOKEN Server-Side Validation
drupal/acquia_dam - SA-CONTRIB-2025-105
drupal/simple_oauth - SA-CONTRIB-2025-114
drupal/civictheme - SA-CONTRIB-2025-113
drupal/json_field - SA-CONTRIB-2025-106
drupal/currency - SA-CONTRIB-2025-110
drupal/umami_analytics - SA-CONTRIB-2025-109
drupal/access_code - SA-CONTRIB-2025-108
drupal/civictheme - SA-CONTRIB-2025-112
drupal/reverse_proxy_header - SA-CONTRIB-2025-111
drupal/plausible_tracking - SA-CONTRIB-2025-107
Sharp user-provided input can be evaluated in a SharpShowTextField with Vue template syntax
PrivateBin is missing HTML sanitization of attached filename in file size hint
Moodle does not properly enforce MFA
Moodle's error handling leads to sensitive information disclosure
Moodle has a time restriction bypass
Moodle vulnerable to brute-force password guesses
Moodle exposed the names of hidden groups to users
Moodle sends quiz-related messages to inactive/suspended users
Moodle course access permissions are not properly checked in course_output_fragment_course_overview
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.