Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,039
Reset filtersServer-Side Request Forgery in yoast_seo
Information leakage in Error Handler
Authenticated Stored XSS in Administration
Improper Certificate Validation in WP-CLI framework
User enumeration in authentication mechanisms
User enumeration in authentication mechanisms
Prevent user enumeration using Guard or the new Authenticator-based Security
drupal/ctools - SA-CONTRIB-2021-009
drupal/facets - SA-CONTRIB-2021-008
drupal/gutenberg - SA-CONTRIB-2021-007
Reflected cross-site scripting in francoisjacquet/rosariosis
Cross-Site Request Forgery in MAGMI
Authentication bypass in MAGMI
Improper Input Validation in Laravel
Cross-site Scripting in OpenCart
SQL Injection in pimcore
Cross-site scripting in ThinkAdmin
Cross-site scripting in phpoffice/phpspreadsheet
OS Command injection in Bolt
Cross-Site Request Forgery in ForkCMS
SQL Injection in librenms
Bypass of fix for CVE-2020-26231, Twig sandbox escape
Object injection in PHPMailer/PHPMailer
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.