Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,068
Reset filtersMagento vulnerable to stored Cross-Site Scripting (XSS)
Magento provides incorrect authorization through a security feature bypass
Magento vulnerable to privilege escalation due to incorrect authorization
Magento vulnerable to stored Cross-Site Scripting (XSS)
Magento allows incorrect authorization
LibreNMS is vulnerable to Reflected-XSS in `report_this` function
Bagisto is vulnerable to XSS through Admin Panel's product creation path
Alt Redirect: Potential Authentication Bypass by Spoofing through query-string stripping logic flaw
drupal-pattern-lab/unified-twig-extensions is vulnerable to XXS
VaahCMS is vulnerable to XSS through its Avatar Upload endpoint
Melis Platform CMS Unauthenticated File Upload Leading to RCE
Melis Platform CMS SQL Injection
Melis Platform CMS Unauthenticated Admin Account Creation
NovoSGA: Manipulation of User Creation Page can lead to weak password requirements
phpMyFAQ duplicate email registration allows multiple accounts with the same email
Dolibarr vulnerable to RCE via the computed field parameter
Auth0 Symfony SDK Does Not Properly Handle File Types in Bulk User Import
laravel-auth0 SDK Does Not Properly Handle File Types in Bulk User Import
auth0-PHP SDK Does Not Properly Handle File Types in Bulk User Import
Joomla! CMS vulnerable to XSS via the input filter
Star Citizen EmbedVideo Extension Stored XSS through wikitext caused by usage of non-reserved data attributes
Mangati NovoSGA XSS vulnerability in /admin
GP247 and S-Cart have a stored cross-site scripting (XSS) vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.