Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,068
Reset filtersSQL Injection in Fork CMS
Safe SVG <= 1.9.9 - Content-Type Bypass
Integer Overflow or Wraparound in Microweber
Unrestricted Upload of File with Dangerous Type in ShowDoc
Exposure of Resource to Wrong Sphere in ThinkPHP Framework
Path Traversal in Studio-42 elFinder through 2.1.60
guzzlehttp/psr7 <= 1.84 and 2.0.0-2.1.0 - Improper Input Validation
Remote Code Execution in Contao Managed Edition
Insufficient Session Expiration in Admidio
Improper Privilege Management in Open Web Analytics
Possibility for Denial of Service by overwriting PHP files with language exports
Improperly checked metadata on tools/armour itemstacks received from the client
Open Redirect
NaN/INF in serverbound movement packets can crash clients and servers
Craft CMS Cross-site Scripting Vulnerability
XSS in doc_link
SQL Injection in tribalsystems/zenario
Cross-site Scripting in Pimcore
Cross-site Scripting in Pimcore
Cross-site Scripting in Pimcore
Drupal core - SA-CORE-2022-005
Stored Cross-site Scripting in ShowDoc
Denial of service in microweber
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.