Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,039
Reset filtersdrupal/block_content_revision_ui - SA-CONTRIB-2021-017
drupal/linky_revision_ui - SA-CONTRIB-2021-016
drupal/ctools - SA-CONTRIB-2021-015
elFinder unsafe upload filtering leading to remote code execution
Authentication bypass in SilverStripe GraphQL
Cross-site scripting in Centreon
Predictable CSRF tokens in centreon/centreon
Server-Side Request Forgery in Feehi CMS
SQL Injection in t3/dce
SQL Injection in tribalsystems/zenario
Cross-site scripting in media2click
reflected XSS in tribalsystems/zenario
Remote code execution in zendframework and laminas-http
Cross-site Scripting (XSS) in baserCMS
OS Command Injection in baserCMS
Cross-site Scripting (XSS) in baserCMS
XSS vulnerability with translator
drupal/openid_connect - SA-CONTRIB-2021-014
drupal/graphql - SA-CONTRIB-2021-013
Improper rate limiting in Koel
JetPack <= 9.7 - Information Disclosure
Drupal core - SA-CORE-2021-003
Open redirect in direct_mail
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.