Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,070
Reset filtersCraft CMS has a potential RCE with a compromised security key
Librenms has a reflected XSS on error alert
LibreNMS Misc Section Stored Cross-site Scripting vulnerability
LibreNMS Ports Stored Cross-site Scripting vulnerability
LibreNMS Display Name Stored Cross-site Scripting vulnerability
LibreNMS Display Name 2 Stored Cross-site Scripting vulnerability
Crayfish allows Remote Code Execution via Homarus Authorization header
Silverstripe Framework has a Reflected Cross Site Scripting (XSS) in error message
Silverstripe Framework has a XSS in form messages
Silverstripe Framework has a XSS via insert media remote file oembed
Mediawiki - DataTransfer Extension Cross-Site Request Forgery (CSRF) and Cross-site Scripting (XSS)
TYPO3 DB Check Module vulnerable to Cross-Site Request Forgery
TYPO3 Scheduler Module vulnerable to Cross-Site Request Forgery
TYPO3 Indexed Search Module vulnerable to Cross-Site Request Forgery
TYPO3 Form Framework Module vulnerable to Cross-Site Request Forgery
TYPO3 Extension Manager Module vulnerable to Cross-Site Request Forgery
TYPO3 Cross-Site Request Forgery in Dashboard Module
TYPO3 Cross-Site Request Forgery in Backend User Module
TYPO3 Cross-Site Request Forgery in Log Module
TYPO3 Potential Open Redirect via Parsing Differences
TYPO3 Information Disclosure via Exception Handling/Logger
Microweber Cross-site Scripting vulnerability
Microweber Cross-site Scripting vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.