Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,039
Reset filtersOctober CMS auth bypass and account takeover
Exposed phpinfo() leadked via documentation files
Improper Neutralization of Formula Elements in a CSV File in pimcore/pimcore
Account Takeover in Octobercms
Unauthenticated SQL Injection in Cachet
Cachet configuration leak
Cachet vulnerable to forced reinstall
Cachet vulnerable to new line injection during configuration edition
drupal/webform - SA-CONTRIB-2021-026
firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)
firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)
firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)
SafeCurl before 0.9.2 has a DNS rebinding vulnerability.
Cross site scripting via HTML attributes in the back end
drupal/admin_toolbar - SA-CONTRIB-2021-025
Cross-Site Scripting via SVG media files
Authenticated server-side request forgery in file upload via URL.
CKEditor 4 vulnerabilities in versions <4.16.1
Privilege escalation via form generator
PHP file inclusion via insert tags
Cross-Site Scripting via Rich-Text Content
Drupal core - SA-CORE-2021-005
Improper Access Control in Dolibarr
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.