Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,069
Reset filtersINTER-Mediator Cross-Site Scripting (XSS)
Pagekit Weak Password Recovery Mechanism for Forgotten Password
OXID eShop user impersonation vulnerability
Mautic Cross-Site Request Forgery (CSRF)
Dolibarr SQL Injection vulnerability
Securimage HTML Injection
Codiad remote code execution vulnerability
Luracast Restler directory traversal vulnerability
Subrion CMS RCE Vulnerability
baserCMS Access Control Bypass
BaserCMS privilege escallation
Concrete CMS vulnerable to cross-site scripting (XSS)
Contao Does Not Expire Tokens Correctly
Bootstrap vulnerable to Cross-Site Scripting (XSS)
HTML Purifier cross-site scripting (XSS) vulnerability
Pi Cross-site Scripting vulnerability
protobuf allows remote authenticated attackers to cause a heap-based buffer overflow.
Directory Traversal in Studio 42 elFinder
Sensitive Data Exposure in elFinder
elFinder Path Traversal vulnerability
elFinder Server Side Request Forgery (SSRF)
Symfony HTTP Foundation web cache poisoning
Moodle Authenticated Spelling Binary Remote Code Execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.