Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,071
Reset filtersphpBB Cross-Site Request Forgery (CSRF)
Magento arbitrary PHP code execution via the productData parameter
phpMyAdmin SQL injection in user accounts page
Moodle does not revoke role capabilities correctly
Bolt Cross-site Scripting via the slug, teaser or title parameters
php-shellcommand command injection vulnerability
TYPO3 SQL Injection in low-level Query Generator
TYPO3 Insecure Deserialization in Query Generator & Query View
TYPO3 Directory Traversal on ZIP extraction
Possible to circumvent title-blacklist
phpMyAdmin unsanitized Git information
Dolibarr ERP and CRM contain XSS Vulnerability
Pagekit File Upload vulnerability
Pimcore Cross-site Scripting (XSS) vulnerability
Pimcore 2FA Vulnerable to Brute Forcing
Pimcore Access Control Issues
Pimcore Discloses Usernames In Use
Magento 2 Community Edition RCE Vulnerability
Magento Remote code execution through catalog attribute sets
Magento 2 Community Edition RCE Vulnerability
Magento Cross-Site Scripting via admin panel
Magento 2 Community Edition SSRF vulnerability
Magento Server-Side Request Forgery (SSRF)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.