Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,404
Reset filtersphpMyFAQ Improper Access Control vulnerability
Stored cross site scripting via container name
Cross-site Scripting (XSS) in Conditions tab of Pricing Rules
Cross-site Scripting (XSS) in DataObjects QuantityValue Unit Definition
Cross-site Scripting (XSS) in pimcore via DataObject Class date fields
Cross-site Scripting (XSS) in Ecommerce Pricing Rules name field
Cross-site Scripting (XSS) in Document Properties Parameter
Cross-site Scripting (XSS) in Website Settings name field
Cross-site Scripting (XSS) in Admin Login too many attempts notice
Cross-site Scripting (XSS) in DataObject Classification Store
HTTP Multiline Header Termination
Shopware vulnerable to cross-site scripting (XSS)
RosarioSIS improper access control vulnerability
AzuraCast/AzuraCast vulnerable to cross-site scripting
Drupal core - SA-CORE-2023-005
Insecure header validation in slim/psr7
Shopware Has Improper Control of Generation of Code in Twig rendered views
alextselegidis/easyappointments vulnerable to Stored Cross-site Scripting
alextselegidis/easyappointments Session Fixation vulnerability
alextselegidis/easyappointments Improper Access Control vulnerability
alextselegidis/easyappointments vulnerable to Stored Cross-site Scripting
yuan1994 tpAdmin Unrestricted Upload of File with Dangerous Type vulnerability
yuan1994 tpAdmin vulnerable to Server-Side Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.