Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,071
Reset filtersTYPO3 SQL Injection in dbal
Cross-Site Scripting in TYPO3 component Indexed Search
TYPO3 is susceptible to Cross-Site Flashing
Multiple Cross-Site Scripting vulnerabilities in TYPO3 backend
Password confirmation stored in plain text via registration form in statamic/cms
Unsafe Reflection in base Component class in yiisoft/yii2
Reflected Cross-site Scripting in yiisoft/yii2 Debug mode
Moodle ReCAPTCHA can be bypassed on the login page
Moodle Unsanitized HTML in site log for config_log_created
Moodle Logout CSRF in admin/tool/mfa/auth.php
Moodle CSRF risk in analytics management of models
Moodle Authenticated LFI risk in some misconfigured shared hosting environments
Moodle Authenticated LFI risk in some misconfigured shared hosting environments
Moodle Authenticated LFI risk in some misconfigured shared hosting environments
Moodle Authenticated LFI risk in some misconfigured shared hosting environments
Moodle CSRF risk in admin preset tool management of presets
Moodle Cross-site Scripting (XSS)
Moodle Improper Input Validation
Moodle stored Cross-site Scripting (XSS)
Moodle Cross-site Scripting (XSS)
Moodle broken access control when setting calendar event type
TYPO3 Frontend vulnerable to Unauthenticated Path Disclosure
TYPO3 Brute Force Protection Bypass in backend login
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.