Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,404
Reset filtersdrupal/safedelete - SA-CONTRIB-2023-039
drupal/acl - SA-CONTRIB-2023-034
hCaptcha for EXT:form Broken Access Control vulnerability
Pimcore Cross-site Scripting (XSS) vulnerability in DataObject datetime fields
Wallabag user can reset data unintentionally
Wallabag user can delete own API client unintentionally
Craft CMS vulnerable to Remote Code Execution via validatePath bypass
Cockpit Cross-site Scripting vulnerability
Cockpit Cross-site Scripting vulnerability
Cockpit Cross-site Scripting vulnerability
Cockpit Cross-site Scripting vulnerability
Flarum vulnerable to LFI and Blind SSRF via Avatar upload
LibreNMS Cross-site Scripting vulnerability
Cockpit Cross-site Scripting vulnerability
SQL manager vulnerability (potential RCE)
[CVE-2023-39529][CVE-2023-39530] path traversal: file deletion in the backoffice
Full SQL injection possible in search product in backoffice
Reading a file through path traversal & Remote Code Execution via unsafe deserialization
Cockpit PHP Remote File Inclusion vulnerability
Admidio Insufficient Session Expiration vulnerability
PyroCMS remote code execution vulnerability
Sulu Observable Response Discrepancy on Admin Login
Pimcore Path Traversal Vulnerability in AssetController:importServerFilesAction
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.