Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,070
Reset filtersMultiple rtmpdump vulnerabilities
Browsershot Local File Inclusion
Cockpit Arbitrary File Upload
Browsershot Path Traversal
PhpSpreadsheet allows bypassing of XSS sanitizer using the javascript protocol and special characters
DevDojo Voyager Arbitrary File Write
DevDojo Voyager vulnerable to reflected Cross-site Scripting
DevDojo Voyager vulnerable to path traversal
Twig security issue where escaping was missing when using null coalesce operator
drupal/druadmin_lte_theme - SA-CONTRIB-2025-010
TYPO3-EXT-SA-2025-001: Account Takeover in extension "OpenID Connect Authentication" (oidc)
pimcore/customer-data-framework vulnerable to SQL Injection
Pimcore Authenticated Stored Cross-Site Scripting (XSS) Via Search Document
Dolibarr Cross-site Scripting vulnerability
Dolibarr Cross-site Scripting vulnerability
Reflected Cross Site Scripting (XSS) in error message
phpMyAdmin XSS when checking tables
drupal/material_admin - SA-CONTRIB-2025-006
ps_contactinfo has potential XSS due to usage of the nofilter tag in template
Missing validation of header name and value in codeigniter4/framework
Cross-Site Scripting (XSS) vulnerability in generateNavigation() function in PhpSpreadsheet
Authenticated arbitrary file deletion in YesWiki
Authenticated Stored XSS in YesWiki
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.