Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,068
Reset filtersCross-site Scripting in snipe-it
CSV Injection Vulnerability
drupal/loft_data_grids - SA-CONTRIB-2021-043
SilverStripe GraphQL Server permission checker not inherited by query subclass.
Cross-site Scripting in SilverStripe Framework
Server-Side Request Forgery vulnerability in concrete5
Cross-site Scripting in Limesurvey
SQL Injection in medoo
Improper Certificate Validation in Heartland & Global Payments PHP SDK
Origin Validation Error in Magento 2
Critical severity vulnerability in Ignition
Stored XSS with custom URLs in PrestaShop module ps_linklist
Sylius PayPal Plugin allows unauthorized access to Credit card form, exposing payer name and not requiring 3DS
Deleted Admin Can Sign In to Admin Interface
Cross-Site-Request-Forgery in Backend
HTTP Host Header Injection
Improper escaping of command arguments on Windows leading to command injection
Pterodactyl Panel vulnerable to authentication bypass due to improper user-provided security token verification
Cross-site scripting in demos/demo.mysqli.php in getID3
Cross-site scripting in application/controllers/dropbox.php in JustWriting
Cross-site Scripting in LaraCMS
Cross-Site Request Forgery in GilaCMS
Cross-site Scripting in GilaCMS
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.