Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,404
Reset filtersTYPO3 is vulnerable to Insecure randomness in uniqid function
TYPO3 Arbitrary Code Execution vulnerability on the backend
MantisBT Insufficient Session Expiration cookie string not reset after logout
Drupal core - SA-CORE-2022-008
MantisBT CSV Injection unprivileged user access in csv_export.php
HTML Injection in Froxlor
Persistent Cross-site Scripting vulnerability in PrivateBin
Improper Neutralization of Formula Elements in a CSV File in Kimai 2
HTTP Proxy header vulnerability
Weak password hash in LiveHelperChat
Open redirect in wwbn/avideo
XSS Injection Vulnerability
Buffer length underflow in LoginPacket causing unchecked exceptions to be thrown
Automatic named constructor discovery in Valinor
Improper Certificate Validation in node-sass affects eZ Platform
Access Control vulnerability in Dolibarr
Cross-site Scripting in Parsedown
drupal/cleantalk - SA-CONTRIB-2022-032
Cross-site Scripting in teampass
Cross-Site Request Forgery in Anchor CMS
SQL Injection in Yeswiki
Cross-site Scripting in Fork CMS
SQL Injection in Fork CMS
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.