Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,068
Reset filtersSQL Injection in topthink/thinkphp
Improper Access Control in Webauthn Framework
Reliance on Cookies without Validation and Integrity Checking in getgrav/grav
Cross-Site Request Forgery in firefly-iii
File reference keys leads to incorrect hashes on HMAC algorithms
User can obtain JWT token even if account is disabled
drupal/linkit - SA-CONTRIB-2021-042
drupal/tb_megamenu - SA-CONTRIB-2021-041
drupal/tb_megamenu - SA-CONTRIB-2021-040
drupal/tb_megamenu - SA-CONTRIB-2021-039
drupal/tb_megamenu - SA-CONTRIB-2021-038
drupal/domain_group - SA-CONTRIB-2021-037
drupal/miniorange_saml - SA-CONTRIB-2021-036
drupal/taxonomy_manager - SA-CONTRIB-2021-035
drupal/file_extractor - SA-CONTRIB-2021-033
drupal/commerce - SA-CONTRIB-2021-032
drupal/cshs - SA-CONTRIB-2021-031
drupal/user_hash - SA-CONTRIB-2021-030
Arbitrary Code Execution in feehi/cms
Cross-site Scripting in yourls
Cross-site Scripting in yourls
Observable Response Discrepancy in Lost Password Service
Drupal core - SA-CORE-2021-010
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.