Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 620
Reset filtersXXE in PHPSpreadsheet encoding is returned
eZ Platform Admin UI vulnerable to DOM-based Cross-site Scripting in file upload widget
Ibexa Admin UI vulnerable to DOM-based Cross-site Scripting in file upload widget
Admidio has Blind SQL Injection in ecard_send.php
Reflected Cross Site-Scripting (XSS) in Oveleon Cookiebar
openCart Server-Side Template Injection (SSTI) vulnerability
Silverstripe Framework has a Cross-site Scripting vulnerability with encoded payload
Cross site scripting in opencart
Cross site scripting in opencart
Cross-site scripting (XSS) vulnerability in Description metadata
TYPO3 CMS Possible Insecure Deserialization in Extbase Request Handling
Reflected Cross-Site Scripting (XSS) in Dolibarr
TYPO3 Possible Insecure Deserialization in Extbase Request Handling
silverstripe/framework has Cross-site Scripting vulnerability in page name
Passbolt API Stored XSS on first/last name during setup
Laravel RCE vulnerability in "cookie" session driver
Laravel Encrypter Component Potential Decryption Failure Leading to Unintended Behavior
Laravel Encrypter Failure to decryption vulnerability
Laravel RCE vulnerability in "cookie" session driver
Blind XSS Leading to Froxlor Application Compromise
Lavalite CMS Cross Site Scripting vulnerability
LibreNMS vulnerable to a Time-Based Blind SQL injection leads to database extraction
Dolibarr Application Home Page has HTML injection vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.