Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 789
Reset filtersDrupal file REST resource does not properly validate
drupal/quick_node_clone - SA-CONTRIB-2022-038
drupal/image_field_caption - SA-CONTRIB-2022-036
drupal/dfp - SA-CONTRIB-2022-035
Drupal vulnerable to Cross-site Scripting
Drupal SQL Injection vulnerability
Drupal Cross-Site Scripting vulnerability
Drupal core - SA-CORE-2022-009
Drupal core - SA-CORE-2022-008
HTTP Proxy header vulnerability
drupal/cleantalk - SA-CONTRIB-2022-032
guzzlehttp/psr7 <= 1.84 and 2.0.0-2.1.0 - Improper Input Validation
Drupal core - SA-CORE-2022-005
drupal/opigno_learning_path - SA-CONTRIB-2022-029
drupal/svg_formatter - SA-CONTRIB-2022-028
drupal/govuk_theme - SA-CONTRIB-2022-027
drupal/entity_reference_tree - SA-CONTRIB-2022-026
drupal/quickedit - SA-CONTRIB-2022-025
Drupal core - SA-CORE-2022-004
Drupal core - SA-CORE-2022-003
Cross-site Scripting in Drupal Core
drupal/custom_breadcrumbs - SA-CONTRIB-2022-024
drupal/fancy_file_delete - SA-CONTRIB-2022-023
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.