Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,039
Reset filtersUser can obtain JWT token even if account is disabled
drupal/linkit - SA-CONTRIB-2021-042
drupal/tb_megamenu - SA-CONTRIB-2021-041
drupal/tb_megamenu - SA-CONTRIB-2021-040
drupal/tb_megamenu - SA-CONTRIB-2021-039
drupal/tb_megamenu - SA-CONTRIB-2021-038
drupal/domain_group - SA-CONTRIB-2021-037
drupal/miniorange_saml - SA-CONTRIB-2021-036
drupal/taxonomy_manager - SA-CONTRIB-2021-035
drupal/file_extractor - SA-CONTRIB-2021-033
drupal/commerce - SA-CONTRIB-2021-032
drupal/cshs - SA-CONTRIB-2021-031
drupal/user_hash - SA-CONTRIB-2021-030
Arbitrary Code Execution in feehi/cms
Cross-site Scripting in yourls
Cross-site Scripting in yourls
Observable Response Discrepancy in Lost Password Service
Drupal core - SA-CORE-2021-010
Drupal core - SA-CORE-2021-009
Drupal core - SA-CORE-2021-008
Drupal core - SA-CORE-2021-007
Drupal core - SA-CORE-2021-006
Any storage file can be downloaded from p.sh if full server path is known
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.