Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,407
Reset filtersLaravel Cookie serialization vulnerability
Laravel Encrypter Component Potential Decryption Failure Leading to Unintended Behavior
Laravel Hijacked authentication cookies vulnerability
Laravel Risk of mass-assignment vulnerabilities
Read private customer data reclaiming carts in Klaviyo Magento
Laravel Encrypter Failure to decryption vulnerability
Laravel Cookie serialization vulnerability
Laravel Risk of mass-assignment vulnerabilities
Laravel RCE vulnerability in "cookie" session driver
Laravel Hijacked authentication cookies vulnerability
fuel/core ImageMagick driver does not escape all shell arguments.
FOSUserBundle Session Hijacking Vulnerability
FOSUserBundle Entropy is lost in the TokenGenerator
friendsofsymfony/oauth2-php open redirection in oauth
eZ Platform User data disclosure
EZsystems Remote code execution in file uploads
eZ Publish Legacy Passwordless login for LDAP users
eZ Publish Legacy Patch EZSA-2018-001 for Several vulnerabilities
eZ Publish Information disclosure in backend content tree menu
eZ Publish Remote code execution in file uploads
eZ Platform Prevent accepting app.php in URL in Platform.sh
eZ Platform REST API returns list of all SiteAccesses
eZ Platform Rules to disable executable access are ignored on Platform.sh (eZ Cloud)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.