Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,039
Reset filtersdrupal/paragraphs - SA-CONTRIB-2026-061
drupal/paragraphs - SA-CONTRIB-2026-060
drupal/wisski - SA-CONTRIB-2026-059
drupal/commerce_realex - SA-CONTRIB-2026-058
drupal/ai_agents - SA-CONTRIB-2026-057
drupal/ai_agents - SA-CONTRIB-2026-056
drupal/ai - SA-CONTRIB-2026-055
drupal/ai - SA-CONTRIB-2026-054
drupal/ai_provider_openai - SA-CONTRIB-2026-053
drupal/admin_feedback - SA-CONTRIB-2026-052
drupal/admin_feedback - SA-CONTRIB-2026-051
Snipe-IT API Vulnerable to Cross-Tenant Accessory Injection
Snipe-IT's S3 signature image retrieval lacks authorization before temporary URL
Snipe-IT has Improper Authorization in File Deletion (IDOR)
Snipe-IT Vulnerable to Privilege Escalation via Missing admin Permission Check in User Creation
Snipe-IT has Multi-Tenancy Bypass via Bulk Asset Update
Snipe-IT has a 2FA reset privilege bypass
Snipe-IT Vulnerable to User Account Escalation via CSV Import
Snipe-IT's TOTP is Brute-Forceable Due to Missing Rate Limiting on `POST /two-factor`
phpMyFAQ: Missing userHasPermission() in 4 API write endpoints (CVE-2026-24421 Incomplete Fix)
Snipe-IT: Bulk editing users allowed `ldap_import` and `activated_in` bulk editing users
Filament: Unauthenticated temporary file upload on auth pages
Snipe-IT Vulnerable to Privilege Escalation for self via API Permissions Assignment
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.