Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,221
Reset filtersMagento Open Source Server-Side Request Forgery (SSRF) vulnerability
Livewire Remote Code Execution on File Uploads
PhpSpreadsheet allows absolute path traversal and Server-Side Request Forgery in HTML writer when embedding images is enabled
PhpSpreadsheet allows absolute path traversal and Server-Side Request Forgery when opening XLSX file
PhpSpreadsheet has an Unauthenticated Cross-Site-Scripting (XSS) in sample file
PHPSpreadsheet Library < 2.3.0 - XXE Injection
Minecraft MOTD Parser's HtmlGenerator vulnerable to XSS
Injection of arbitrary HTML/JavaScript code through the media download URL
LibreNMS has Stored Cross-site Scripting vulnerability in "Alert Rules" feature
LibreNMS has Stored Cross-site Scripting vulnerability in "Alert Templates" feature
LibreNMS has Stored Cross-site Scripting vulnerability in "Device Dependencies" feature
Contao affected by remote command execution through file upload
Code Snippet GeSHi plugin in CKEditor 4 has reflected cross-site scripting (XSS) vulnerability
Filament Excel Vulnerable to Path Traversal Attack on Export Download Endpoint
Shopware vulnerable to Server Side Template Injection in Twig using Context functions
Shopware vulnerable to Server Side Template Injection in Twig using deprecation silence tag
Studio 42 elFinder vulnerable to Incorrect Access Control
Pimcore vulnerable to disclosure of system and database information behind /admin firewall
Admidio Vulnerable to RCE via Arbitrary File Upload in Message Attachment
openCart Server-Side Template Injection (SSTI) vulnerability
Silverstripe Framework has a Cross-site Scripting vulnerability with encoded payload
The FIDO2/Webauthn Support for PHP library allows enumeration of valid usernames
PrivateBin allows shortening of URLs for other domains
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.