Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 400
Reset filtersdrupal/file_extractor - SA-CONTRIB-2021-033
Dolibarr Cross-site Scripting vulnerability
Exposed phpinfo() leadked via documentation files
Drupal core - SA-CORE-2021-004
Path Traversal within joomla/archive zip class
Mautic Sessions could be hijacked due to tracking contacts by an auto-incremented ID
Cross-Site Scripting through Fluid view helper arguments
drupal/easy_breadcrumb - SA-CONTRIB-2020-027
Backend Same-Site Request Forgery in TYPO3 CMS
drupal/webform - SA-CONTRIB-2020-012
Exceptions displayed in non-debug configurations in Symfony
Log injection in SimpleSAMLphp
Persistent XSS vulnerability in filename of attached file in PrivateBin
Object injection in cookie driver in phpfastcache
SQL Injection in LibreNMS
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.