Critical
CVE-2020-22452
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,404
Reset filters
Medium
CVE-2021-21395
magento-lts Reset Password not protected against well-timed CSRF
Medium
ghsa-xwhj-pqcg-8rcr
CakePHP vulnerable to Cross-site Scripting in some development error pages
Medium
ghsa-j9q2-f9q7-jhgq
CakePHP SecurityComponent cross form submission issue
Medium
CVE-2023-22734
Shopware has Improper Input Validation issue in newsletter subscription
Medium
ghsa-829q-v5g8-hhxc
CakePHP has incorrect Cross-Site Request Forgery validation
Low
CVE-2023-22733
Shopware's log module vulnerable to Improper Output Neutralization
Unrated
drupal-contrib-2023-003
drupal/media_library_block - SA-CONTRIB-2023-003
Critical
CVE-2023-22731
Shopware vulnerable to Improper Control of Generation of Code in Twig rendered views
Medium
CVE-2023-22730
Shopware vulnerable to Improper Input Validation of Clearance sale in cart
Medium
CVE-2010-10008
simplesamlphp-module-openidprovider Cross Site Scripting vulnerability
Medium
ghsa-m95x-m25c-w9mp
XML-RPC for PHP allows access to local files via malicious argument to the Client::send method
Low
CVE-2023-22489
Any Flarum user including unactivated can reply in public discussions whose first post was permanently deleted
Medium
CVE-2023-22488
Flarum notifications can leak restricted content
High
CVE-2023-22487
Flarum post mentions can be used to read any post on the forum without access control
High
CVE-2023-54396
PocketMine-MP has improperly handled dye colour IDs in banner NBT, leading to server crash
High
CVE-2015-10012
FrameworkUserBundle Generates Error Message Containing Sensitive Information
Medium
CVE-2010-10002
SimpleSAMLphp simplesamlphp-module-openid
Medium
CVE-2017-20158
Yii2 FileAPI Widget vulnerable to Cross-site Scripting
High
CVE-2022-46170
CodeIgniter4 Potential Session Handlers Vulnerability
High
CVE-2022-23556
CodeIgniter4 allows spoofing of IP address when using proxy
Medium
CVE-2022-4647
Microweber vulnerable to Stored Cross-Site Scripting
Medium
CVE-2022-4617
Microweber vulnerable to Reflected Cross-site Scripting
High
CVE-2022-47411
"Newsletter subscriber management" (fp_newsletter) TYPO3 extension leaks subscriber data
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.