Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,404
Reset filterszbateson/mail-mime-parser has CRLF header injection via attachment filename
zbateson/mail-mime-parser has uncontrolled resource consumption (CPU/memory DoS) parsing untrusted MIME
phpMyFAQ has SQL Injection in `StopWords::add()` — Unescaped Stop Word Insertion
phpMyFAQ's two-factor authentication login bypasses the password factor
phpMyFAQ has Stored XSS in Admin FAQ Editor via HTML Entity Bypass in Frontend FAQ Submission
Snipe-IT: Stored XSS via Inline XML Rendering in the Uploaded Files API
Snipe-IT: 2FA bypass via the API token flow
REDAXO: Unwhitelisted ORDER BY Column in rex_list Allows Authenticated Column Enumeration
Formie: Missing authorization on sent notification resend modal exposes submission PII
Formie: Integration form-settings action allows SSRF and exfiltration of stored integration credentials
Sulu: JCR-SQL2 injection via `categories` query parameter (unauthenticated)
drupal/smart_content - SA-CONTRIB-2026-190
drupal/css_usage_analyzer - SA-CONTRIB-2026-189
drupal/combined_image_style - SA-CONTRIB-2026-188
drupal/ai_ckeditor - SA-CONTRIB-2026-187
drupal/tawk_to - SA-CONTRIB-2026-184
drupal/stop_admin - SA-CONTRIB-2026-183
drupal/mermaid_diagram_field - SA-CONTRIB-2026-180
drupal/project_browser - SA-CONTRIB-2026-178
drupal/cloud - SA-CONTRIB-2026-177
drupal/cloud - SA-CONTRIB-2026-176
drupal/webform - SA-CONTRIB-2026-175
drupal/webform - SA-CONTRIB-2026-174
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.