Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,068
Reset filtersSnipe-IT allows XSS
TYPO3 "Form to Database" extension susceptible to Cross-site Scripting
Open Web Analytics Server is vulnerable to SQL Injection
Subrion CMS: Authenticated administrators are able to gain escalated access through Run SQL Query tool
Shopware: Reflective Cross Site-Scripting (XSS) in CMS components
TinyEnv: Inline comments not stripped properly in .env values
TinyEnv: Missing .env file not required — may cause unexpected behavior
Maho is Vulnerable to Authenticated Remote Code Execution via File Upload
YesWiki Cross Site Scripting vulnerability
Magento Community Edition Improper Input Validation vulnerability
TYPO3 CSV download feature information disclosure
TYPO3 Workspaces Module Information Disclosure
TYPO3 backend modules have Broken Access Control
TYPO3 CMS exposes sensitive information in an error message
TYPO3 CMS uses insufficient entropy when generating passwords
TYPO3 Bookmark Toolbar vulnerable to denial of service
TYPO3 CMS has an open‑redirect vulnerability
Presta Shop vulnerable to email enumeration
Mautic Vulnerable to User Enumeration via Response Timing
Mautic vulnerable to reflected XSS in lead:addLeadTags - Quick Add
Mautic vulnerable to secret data extraction via elfinder
Mautic vulnerable to SSRF via webhook function
PocketMine-MP `ResourcePackDataInfoPacket` amplification vulnerability due to lack of resource pack sequence status checking
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.