Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,221
Reset filtersMoodle Stored XSS and blind SSRF possible via SCORM track details
Drupal core - SA-CORE-2022-014
Code injection in grav
Stored XSS via HTML fields in SilverStripe Framework
Server-Side Request Forgery in dompdf/dompdf
Code Injection in SEOmatic
Improperly checked IDs on itemstacks received from the client leading to server crash in PocketMine-MP
Denial-of-service vulnerability processing large chat messages containing many newlines
XSS in various backend modules due to (un)escaping in JS notification module
phpMyAdmin Cross-Site Request Forgery (CSRF)
TYPO3 Image Processing susceptible to Code Execution
Magento affected by a server-side denial-of-service using a GraphQL field
Grav CMS Local File Injection
Grav CMS Arbitrary File Deletion
ThinkAdmin directory traversal vulnerability
Codiad SSRF Vulnerability
phpBB Server-Side Request Forgery Vulnerability
Shopware vulnerable to SSRF
img_auth.php may leak private extension images into the public cache
EC-CUBE Directory traversal vulnerability
Centreon Sensitive Data Exposure vulnerability
Subrion CMS Cross-Site Request Forgery (CSRF) vulnerability
SEOmatic for CraftCMS allows Server-Side Template Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.