Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,071
Reset filtersNukeViet Cross-Site Request Forgery (CSRF)
NukeViet Cross-Site Request Forgery (CSRF)
Dolibarr reflected cross-site scripting (XSS) vulnerability
EC-CUBE Directory traversal vulnerability
WooCommerce Cross-Site Request Forgery (CSRF)
Dolibarr SQL injection vulnerability in accountancy/customer/card.php
KumbiaPHP Cross-site Scripting
OpenCart Cross-site Scripting
Comments plugin stored Cross-site Scripting (XSS) via an asset volume name
Comments plugin stored Cross-site Scripting via a guest name
Comments plugin Cross-Site Request Forgery (CSRF)
MediaWiki Open Redirect vulnerability
Fork CMS Cross-site Scripting Vulnerability
Knock Knock plugin Open redirection vulnerability
Centreon Sensitive Data Exposure vulnerability
Knock Knock plugin IP Whitelist bypass via an X-Forwarded-For HTTP header
Image Resizer Cross-site Scripting (XSS) in the Bulk Resize action
Image Resizer Cross-Site Request Forgery (CSRF)
Moodle vulnerable to RCE
Dolibarr Stored Cross-site Scripting via file upload
Microweber allows Unrestricted File Upload
Dolibarr Stored Cross-site Scripting
Subrion CMS Cross-Site Request Forgery (CSRF) vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.