Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,071
Reset filtersdrupal/facets - SA-CONTRIB-2024-047
drupal/block_permissions - SA-CONTRIB-2024-046
drupal/monster_menus - SA-CONTRIB-2024-045
Livewire Remote Code Execution on File Uploads
Denial of Service in TYPO3 Bookmark Toolbar
Information Disclosure in TYPO3 Page Tree
LimeSurvey Cross Site Scripting vulnerability
LimeSurvey Cross Site Scripting vulnerability
Krayin CRM vulnerable to Cross Site Scripting (XSS) via the organization name
PhpSpreadsheet HTML writer is vulnerable to Cross-Site Scripting via JavaScript hyperlinks
PhpSpreadsheet allows absolute path traversal and Server-Side Request Forgery in HTML writer when embedding images is enabled
PhpSpreadsheet allows absolute path traversal and Server-Side Request Forgery when opening XLSX file
Lara-zeus Dynamic Dashboard and Artemis do not validate paragraph widget values which can be used for XSS
PhpSpreadsheet has an Unauthenticated Cross-Site-Scripting (XSS) in sample file
PHPSpreadsheet Library < 2.3.0 - XXE Injection
Mediawiki Cargo extension vulnerable to Cross-site Scripting
Improper permissions handling in MediaWiki AbuseFilter
Minecraft MOTD Parser's HtmlGenerator vulnerable to XSS
Injection of arbitrary HTML/JavaScript code through the media download URL
Cross-site Scripting via uploaded SVG
Zenario Cross Site Scripting in the Image library
Zenario allows authenticated admin users to upload PDF files containing malicious code
October allows an admin account to upload PDF containing malicious JavaScript
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.