Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Wikimedia MediaWik exposed suppressed log in RevisionDelete page
MediaWiki Incorrect Access Control vulnerability
Wikimedia MediaWiki allows CSRF
Wikimedia MediaWiki Incorrect Access Control vulnerability
MediaWiki Incorrect Access Control vulnerability
paypal/adaptivepayments-sdk-php vulnerable to a reflected XSS
Contao SQL injection in the file manager
CodeIgniter Rest Server XXE Vulnerability
Subrion CMS XSS
infusionsoft-php-sdk reflected Cross-site Scripting
mxGraph vulnerable to cross-site scripting in color field
KeyIdentity LinOTP before 2.10.5.3 has Incorrect Access Control (issue 1 of 2).
Moodle all messaging conversations could be viewed
Moodle Private files uploaded via incoming mail processing could bypass quota restrictions
Moodle Open Redirect Vulnerability
Openstack Magnum Unsafe Credential Handling
MantisBT cross-site scripting (XSS) vulnerability through crafted PATH_INFO
Craft CMS XSS Vulnerability
Shopware Insecure Deserialization Vulnerability
silverstripe restfulserver and registry modules SQL injection vulnerability
Improper Restriction of XML External Entity Reference Jenkins Token Macro Plugin
Jenkins ElectricFlow Plugin cross-site request forgery vulnerability
Jenkins ElectricFlow Plugin is vulnerable to reflected cross site scripting vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.