Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 620
Reset filtersLibreNMS vulnerable to rate limiting bypass on login page
Pimcore Admin Classic Bundle Cross-site Scripting (XSS) in PDF previews
Kimai (Authenticated) SSTI to RCE by Uploading a Malicious Twig File
Evolution CMS Cross-site Scripting vulnerability
Evolution CMS Cross-site Scripting vulnerability
Subrion CMS vulnerable to Cross-site Scripting
TinyMCE mXSS vulnerability in undo/redo, getContent API, resetContent API, and Autosave plugin
Cachet vulnerable to Authenticated Remote Code Execution
Magento Open Source allows Cross-Site Scripting (XSS)
OroCommerce Cross-site Scripting vulnerability in add note dialog of Shopping List line item
Subrion CMS Cross-site Scripting vulnerability
Subrion CMS Cross-site Scripting vulnerability in /panel/languages
Subrion CMS XSS in /panel/configuration/financial/
PocketMine-MP server crash with certain invalid JSON payloads in `LoginPacket` due to dependency vulnerability (again)
Snappy PHAR deserialization vulnerability
Badaso vulnerable to cross-site scripting
grav Server-side Template Injection (SSTI) mitigation bypass
ImpressCMS Cross-site Scripting vulnerability
Winter CMS stored XSS through privileged upload of SVG file
Grav Server-side Template Injection (SSTI) via Twig Default Filters
Grav Server-side Template Injection (SSTI) via Denylist Bypass Vulnerability
Grav Server-side Template Injection (SSTI) via Twig Default Filters
Grav Server Side Template Injection (SSTI) vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.