Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,071
Reset filtersSunHater KCFinder cross-site scripting (XSS) vulnerability in upload.php
Dolibarr Cross Site Request Forgery (CSRF)
Firefly III vulnerable to reflected cross-site scripting
Firefly III vulnerable to stored XSS
Firefly III vulnerable to image-based stored XSS
Firefly III vulnerable to stored XSS
Dolibarr Cross Site Scripting (XSS)
Wikimedia information leak vulnerability
Wikimedia Potential DOS due to slow WatchedItemStore::countVisitingWatchersMultiple
MediaWiki Incorrect Access Control vulnerability
MediaWiki Cross-site Scripting (XSS)
Wikimedia MediaWik exposed suppressed log in RevisionDelete page
MediaWiki Incorrect Access Control vulnerability
Wikimedia MediaWiki allows CSRF
Wikimedia MediaWiki Incorrect Access Control vulnerability
MediaWiki Incorrect Access Control vulnerability
paypal/adaptivepayments-sdk-php vulnerable to a reflected XSS
Contao SQL injection in the file manager
CodeIgniter Rest Server XXE Vulnerability
Subrion CMS XSS
infusionsoft-php-sdk reflected Cross-site Scripting
Moodle all messaging conversations could be viewed
Moodle Private files uploaded via incoming mail processing could bypass quota restrictions
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.