Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,029
Reset filtersCkeditor XSS Vulnerability
drupal/paragraphs - SA-CONTRIB-2018-073
drupal/decoupled_router - SA-CONTRIB-2018-071
drupal/workbench_moderation - SA-CONTRIB-2018-067
Bootstrap Cross-site Scripting vulnerability
Bootstrap Cross-site Scripting vulnerability
drupal/fraction - SA-CONTRIB-2018-059
drupal/commerce - SA-CONTRIB-2018-057
drupal/phpconfig - SA-CONTRIB-2018-055
drupal/entity_delete - SA-CONTRIB-2018-040
drupal/adtego_siteintel - SA-CONTRIB-2018-039
drupal/mollom - SA-CONTRIB-2018-038
drupal/svg_formatter - SA-CONTRIB-2018-027
drupal/simple_revision - SA-CONTRIB-2018-025
drupal/jsonapi - SA-CONTRIB-2018-021
drupal/drd_agent - SA-CONTRIB-2018-022
Drupal Core Remote Code Execution Vulnerability
drupal/menu_export - SA-CONTRIB-2018-018
Enhanced Image plugin for CKEditor is vulnerable to Cross-site scripting (XSS)
Drupal Core Remote Code Execution Vulnerability
drupal/exif - SA-CONTRIB-2018-017
drupal/jsonapi - SA-CONTRIB-2018-016
drupal/jsonapi - SA-CONTRIB-2018-015
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.