Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,407
Reset filtersLibreNMS Ports Stored Cross-site Scripting vulnerability
LibreNMS Display Name 2 Stored Cross-site Scripting vulnerability
Crayfish allows Remote Code Execution via Homarus Authorization header
Silverstripe Framework has a XSS in form messages
TYPO3 DB Check Module vulnerable to Cross-Site Request Forgery
TYPO3 Scheduler Module vulnerable to Cross-Site Request Forgery
TYPO3 Indexed Search Module vulnerable to Cross-Site Request Forgery
TYPO3 Form Framework Module vulnerable to Cross-Site Request Forgery
TYPO3 Extension Manager Module vulnerable to Cross-Site Request Forgery
TYPO3 Cross-Site Request Forgery in Dashboard Module
TYPO3 Cross-Site Request Forgery in Backend User Module
TYPO3 Cross-Site Request Forgery in Log Module
TYPO3 Information Disclosure via Exception Handling/Logger
Microweber Cross-site Scripting vulnerability
drupal/profile_private - SA-CONTRIB-2025-002
drupal/email_tfa - SA-CONTRIB-2025-001
PHP-Textile has persistent XSS vulnerability in image link handling
Guzzle OAuth Subscriber has insufficient nonce entropy
Extension:TabberNeue vulnerable to Cross-site Scripting
PhpSpreadsheet has a Cross-Site Scripting (XSS) vulnerability of the hyperlink base in the HTML page header
PhpSpreadsheet has a Cross-Site Scripting (XSS) vulnerability in custom properties
phpMyFAQ Vulnerable to Stored HTML Injection at FAQ
TeamPass mail_me operation authorization issue
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.