Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,071
Reset filtersDolibarr Cross-site Scripting via the qty parameter in product/fournisseurs.php
Dolibarr ERP and CRM SQLi
Dolibarr ERP and CRM contain XSS Vulnerability
Dolibarr ERP and CRM contain XSS Vulnerability
Fat-Free Framework arbitrary code execution
phpBB Cross-Site Request Forgery (CSRF)
Froxlor Information Disclosure
Froxlor arbitrary code execution via the database configuration options
Froxlor Exposure of Sensitive Information to an Unauthorized Actor
SEOmatic for CraftCMS allows Server-Side Template Injection
SilverStripe Denial of Service on flush and development URL tools
Silverstripe CSRF Protection Bypass via GraphQL
Dolibarr ERP and CRM contain XSS Vulnerability
Magento security bypass vulnerability
Magento deserialization vulnerability
Magento stored cross-site scripting vulnerability
Magento sql injection vulnerability
Magento Path Traversal
Magento stored cross-site scripting vulnerability
Dolibarr Improper Restriction of Excessive Authentication Attempts
Typo3 Cross-Site Scripting in Flash component (ELTS)
Dolibarr cross-site scripting (XSS) vulnerability
Zenario CMS vulnerable to CRLF injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.