Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Data Flow Sanitation Issue Fix
Cross-site scripting in imgURL
Injection in MockServer
Dolibarr Cross-site Scripting vulnerability
Cross-site scripting in feehicms
Improper Restriction of Rendered UI Layers or Frames in yourls
Cross-site scripting vulnerability in file upload
Unauthorized property update in CheckboxGroup component in Vaadin 12-14 and 15-20
Unauthorized property update in CheckboxGroup component in Vaadin 12-14 and 15-20
Insecure direct object reference of log files of the Import/Export feature
Command injection in mail agent settings
Manipulation of product reviews via API
October CMS auth bypass and account takeover
Exposed phpinfo() leadked via documentation files
Improper Neutralization of Formula Elements in a CSV File in pimcore/pimcore
Account Takeover in Octobercms
Unauthenticated SQL Injection in Cachet
TimelockController vulnerability in OpenZeppelin Contracts
TimelockController vulnerability in OpenZeppelin Contracts
Unlimited transforms allowed for signed nodes
Cachet configuration leak
Cachet vulnerable to forced reinstall
Cachet vulnerable to new line injection during configuration edition
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.