Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
GeniXCMS Cross-site Scripting
GeniXCMS Cross-site Scripting (XSS)
Dolibarr SQL Injection in doli/theme/eldy/style.css.php via the lang parameter
Dolibarr ERP and CRM contain XSS Vulnerability
Dolibarr ERP and CRM Insecure Encryption
CSRF in baserCMS 3.0.10 and earlier
baserCMS Cross Site Request Forgery vulnerability
baserCMS Cross-site Scripting vulnerability
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
Apache Tomcat Allows Replacing of XML Parser
ChakraCore RCE Vulnerability
ChakraCore RCE Vulnerability
Moodle Cross-Site Request Forgery (CSRF)
ChakraCore RCE Vulnerability
MODX Revolution cross-site scripting vulnerability
MODX Revolution allows overwriting .htaccess
MODX Revolution Reflected XSS
MODX Revolution XSS via HTTP Host header
MODX Revolution Directory Traversal Vulnerability
ViMbAdmin Cross-site Scripting Vulnerabilities
admidio CSRF Vulnerability
Contao Core directory traversal vulnerability
Laravel does not properly constrain the host portion of a password-reset URL
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.