Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,406
Reset filtersPrevent RCE when deserializing untrusted user input
Cross-site Scripting in Backdrop CMS
SQL injection in Dolibarr
ezplatform-graphql GraphQL queries can expose password hashes
GraphQL queries can expose password hashes
FeehiCMS is vulnerable to Cross-Site Scripting (XSS)
OpenCart SQL injection vulnerability
TYPO3 Extension femanager vulnerable to Broken Access Control
Centreon vulnerable to SQL Injection
phpCAS authentication library < 1.6.0 - Service Hostname Discovery Exploitation
ProcessWire vulnerable to Cross-Site Request Forgery
ProcessWire vulnerable to Cross-site Scripting
phpMyFAQ contains Weak Password Requirements
RCE vulnerability in Pimcore/Mail & Dynamic Text Layout
Prototype pollution in Snowboard framework
phpMyFAQ vulnerable to Cross-site Scripting
Kirby CMS vulnerable to user enumeration in the brute force protection
Kirby CMS vulnerable to user enumeration in the code-based login and password reset forms
Magento Open Source allows Improper Access Control
October CMS Safe Mode bypass leads to authenticated Remote Code Execution
melisplatform/melis-asset-manager vulnerable to Path Traversal
melisplatform/melis-cms vulnerable to deserialization of untrusted data
melisplatform/melis-front vulnerable to deserialization of untrusted data
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.