Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,404
Reset filtersManipulation of product reviews via API
October CMS auth bypass and account takeover
Exposed phpinfo() leadked via documentation files
Account Takeover in Octobercms
Unauthenticated SQL Injection in Cachet
Cachet configuration leak
Cachet vulnerable to forced reinstall
Cachet vulnerable to new line injection during configuration edition
Cross site scripting via HTML attributes in the back end
drupal/admin_toolbar - SA-CONTRIB-2021-025
Cross-Site Scripting via SVG media files
Authenticated server-side request forgery in file upload via URL.
CKEditor 4 vulnerabilities in versions <4.16.1
Privilege escalation via form generator
Cross-Site Scripting via Rich-Text Content
Missing Authorization in TYPO3 extension
Missing Authorization in TYPO3 extension
Missing Authorization in TeamPass
Information Disclosure in User Authentication
Cross-Site Scripting in Backend Grid View
Cross-Site Scripting in Query Generator & Query View
Cross-Site Scripting in Page Preview
Cross-site scripting (XSS) from field and configuration text displayed in the Panel
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.