Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,068
Reset filtersshowdoc is vulnerable to Cross-Site Request Forgery (CSRF)
showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
Cross-site Scripting in pegasus/google-for-jobs
Unrestricted access to predictable file paths in hov/jobfair
Path traversal in grav
Insecure Inherited Permissions in neoan3-apps/template
Cross-site Scripting in LibreNMS
Unrestricted Uploads in Concrete5
Cross-site scripting vulnerability in TinyMCE plugins
XML External Entity vulnerability in MODX CMS
Cross-Site Scripting in grav
Cross-Site Request Forgery in firefly-iii
Cross-Site Request Forgery in firefly-iii
Authenticated Stored XSS in shopware/shopware
Cross Site Scripting in Microweber
Showdoc File Upload Vulnerability
Cross-site scripting in forkcms
pterodactyl/panel CSRF allowing an external page to trigger a user logout event
Cross-site scripting vulnerability in TinyMCE
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in sulu/sulu
Cross-site Scripting in snipe-it
Exposure of Sensitive Information to an Unauthorized Actor in Moodle
Cross-Site Request Forgery in snipe-it
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.