Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,070
Reset filtersMoodle has a SQL injection risk in course search module list filter
Moodle has an IDOR in badges allows disabling of arbitrary badges
Moodle allows teachers to evade trusttext config when restoring glossary entries
Leantime allows Cross-Site Scripting (XSS)
Leantime affected by Improper Neutralization of HTML Tags
Leantime has Missing Authorization Check for Host Parameter
Leantime allows Stored Cross-Site Scripting (XSS)
Leantime allows Cross-Site Request Forgery (CSRF)
Leantime allows Cross Site Scripting (XSS) and SQL Injection (SQLi)
Leantime allows Stored Cross-Site Scripting (XSS)
Leantime allows Refelected Cross-Site Scripting (XSS)
Leantime has Insufficiently Protected Credentials
Leantime allows Stored Cross-Site Scripting (XSS)
Leantime has Host Header Injection Vulnerability
Drupal core - SA-CORE-2025-003
Drupal core - SA-CORE-2025-002
Drupal core - SA-CORE-2025-001
Remote code execution in alextselegidis/easyappointments
Easy!Appointments Improper Restriction of Excessive Authentication Attempts
Crayfish Allows Remote Code Execution via hypercube X-Islandora-Args Header
Improper Authorization vulnerability in Magento and Adobe Commerce
Magento Improper Access Control vulnerability
Magento Improper Access Control vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.