Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,407
Reset filtersDcat Admin Cross-site Scripting (XSS) vulnerability
lgsl Stored Cross-Site Scripting vulnerability
thorsten/phpmyfaq Unintended File Download Triggered by Embedded Frames
Laravel Pulse Allows Remote Code Execution via Unprotected Query Method
drupal/all_extensions - SA-CONTRIB-2024-075
drupal/git_utils - SA-CONTRIB-2024-074
league/commonmark's quadratic complexity bugs may lead to a denial of service
Winter CMS Modules allows a sandbox bypass in Twig templates leading to data modification and deletion
phpMyFAQ Generates an Error Message Containing Sensitive Information if database server is not available
drupal/entity_form_steps - SA-CONTRIB-2024-071
drupal/minifyjs - SA-CONTRIB-2024-070
drupal/pages_restriction - SA-CONTRIB-2024-068
ibexa/post-install affected by Breach with Varnish VCL
ibexa/http-cache affected by Breach with Varnish VCL
ezsystems/ezplatform-http-cache affected by Breach with Varnish VCL
SPEmailHandler-PHP has Potential Abuse for Sending Arbitrary Emails
drupal/tarte_au_citron - SA-CONTRIB-2024-064
drupal/mailjet - SA-CONTRIB-2024-062
Drupal core contains a potential PHP Object Injection vulnerability
Drupal core contains a potential PHP Object Injection vulnerability
Drupal core contains a potential PHP Object Injection vulnerability
Drupal core - SA-CORE-2024-004
Drupal core - SA-CORE-2024-003
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.