Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,406
Reset filterseZ Platform Bundled jQuery affected by CVE-2019-11358
ezsystems/ez-support-tools Failing access control in system info view
Cross-site Scripting (XSS) in DemoBundle/ezdemo bundled VideoJS
Cross-site Scripting (XSS) in DemoBundle/ezdemo bundled VideoJS
Drupal core Access control bypass
Drupal core Denial of Service
Drupal core Remote Code Execution
Drupal Malicious file upload with filenames stating with dot
Drupal Anonymous Open Redirect
Drupal Content moderation Access bypass
Drupal External URL injection through URL aliases leading to Open Redirect
Drupal core Access bypass
Drupal core unrestricted file upload
Drupal core Denial of Service
Drupal core Remote Code Execution
Drupal Anonymous Open Redirect
Drupal External URL injection through URL aliases leading to Open Redirect
Drupal Content moderation Access bypass
doctrine/doctrine-module zero-valued authentication credentials vulnerability
datadog/dd-trace Circumvents open_basedir INI directive
Inadequate XSS Prevention in CodeIgniter/Framework Security Library
OpenCFP Framework (Sentry) Account takeover via null password reset codes
Denial of Service in extension "Code Highlight" (codehighlight)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.