Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,068
Reset filtersCross-site Scripting in Grav
SQL Injection in SimpleSAMLphp
Cross-site scripting in Dolibarr
Cross-site Scripting in Bolt
drupal/bat - SA-CONTRIB-2019-074
Incorrect Access Control vulnerability in api-platform/core
Cross-site Scripting in YII2-CMS
SQL Injection in LibreNMS
SQL Injection in LibreNMS
Path Traversal in LibreNMS
Exposure of Sensitive Information to an Unauthorized Actor in LibreNMS
Improper Encoding or Escaping of Output and Injection in LibreNMS
Missing Authentication for Critical Function in LibreNMS
Missing Authorization in Drupal
drupal/simple_amp - SA-CONTRIB-2019-071
drupal/gutenberg - SA-CONTRIB-2019-069
drupal/permissions_by_term - SA-CONTRIB-2019-068
Access of Resource Using Incompatible Type ('Type Confusion') in yourls/yourls
drupal/tablefield - SA-CONTRIB-2019-067
drupal/create_user_permission - SA-CONTRIB-2019-066
Moderate severity vulnerability that affects league/commonmark
UserPro <= 4.9.34 - Reflected Cross-Site Scripting
drupal/imagecache_external - SA-CONTRIB-2019-065
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.