Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,068
Reset filtersImproper Restriction of Rendered UI Layers or Frames in yourls
Cross-site scripting vulnerability in file upload
Insecure direct object reference of log files of the Import/Export feature
Command injection in mail agent settings
Manipulation of product reviews via API
October CMS auth bypass and account takeover
Exposed phpinfo() leadked via documentation files
Improper Neutralization of Formula Elements in a CSV File in pimcore/pimcore
Account Takeover in Octobercms
Unauthenticated SQL Injection in Cachet
Cachet configuration leak
Cachet vulnerable to forced reinstall
Cachet vulnerable to new line injection during configuration edition
drupal/webform - SA-CONTRIB-2021-026
firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)
firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)
firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)
SafeCurl before 0.9.2 has a DNS rebinding vulnerability.
Cross site scripting via HTML attributes in the back end
drupal/admin_toolbar - SA-CONTRIB-2021-025
Cross-Site Scripting via SVG media files
Authenticated server-side request forgery in file upload via URL.
CKEditor 4 vulnerabilities in versions <4.16.1
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.