Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,029
Reset filtersSymfony Cross-site Scripting (XSS) vulnerability
Composer JavaScript injection possible via html comments
Magento Cross-Site Scripting via Attribute Set Name
Bypass of sitemp access restrictions
Remote code execution via vulnerable Symphony dependecy injection
Using JS libraries with known security vulnerabilities
Information disclosure through processing of external XML entities
Signature validation bypass in XmlSecLibs
Authorization Bypass Through User-Controlled Key in Bagisto
Cross-site Scripting in Grav
SQL Injection in SimpleSAMLphp
Cross-site scripting in Dolibarr
Cross-site Scripting in Bolt
drupal/bat - SA-CONTRIB-2019-074
Incorrect Access Control vulnerability in api-platform/core
Cross-site Scripting in YII2-CMS
SQL Injection in LibreNMS
SQL Injection in LibreNMS
Path Traversal in LibreNMS
Exposure of Sensitive Information to an Unauthorized Actor in LibreNMS
Improper Encoding or Escaping of Output and Injection in LibreNMS
Missing Authentication for Critical Function in LibreNMS
Missing Authorization in Drupal
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.