Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,071
Reset filtersdrupal/entity_form_steps - SA-CONTRIB-2024-071
drupal/minifyjs - SA-CONTRIB-2024-070
drupal/download_all_files - SA-CONTRIB-2024-069
drupal/pages_restriction - SA-CONTRIB-2024-068
drupal/miniorange_oauth_client - SA-CONTRIB-2024-067
ibexa/post-install affected by Breach with Varnish VCL
ibexa/http-cache affected by Breach with Varnish VCL
ezsystems/ezplatform-http-cache affected by Breach with Varnish VCL
Ibexa Admin UI vulnerable to Cross-site Scripting in a field that is used in the Content name pattern
SimpleSAMLphp SAML2 has an XXE in parsing SAML messages
SimpleSAMLphp xml-common XXE vulnerability
SPEmailHandler-PHP has Potential Abuse for Sending Arbitrary Emails
drupal/tarte_au_citron - SA-CONTRIB-2024-064
TCPDF Local File Inclusion vulnerability
drupal/mailjet - SA-CONTRIB-2024-062
Drupal core contains a potential PHP Object Injection vulnerability
Drupal core contains a potential PHP Object Injection vulnerability
Drupal core contains a potential PHP Object Injection vulnerability
Drupal core - SA-CORE-2024-004
Drupal core - SA-CORE-2024-003
Moodle allows users to retrieve information they did not have permission to access
Moodle Lesson activity password bypass through PHP loose comparison
Moodle IDOR when accessing list of course badges
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.