Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,070
Reset filtersZendFramework1 Potential SQL injection in the ORDER implementation of Zend_Db_Select
Zendframework potential security issue in login mechanism
willdurand/js-translation-bundle potential path traversal attack and remote code injection
Adminer file disclosure vulnerability
ua-parser/uap-php ReDoS vulnerability
Zend-developer-tools information disclosure vulnerability
Zend_Filter_StripTags vulnerable to Cross-site Scripting when comments allowed
Zend-Diactoros URL Rewrite vulnerability
Zend-Navigation vulnerable to Cross-site Scripting
Zend-Feed URL Rewrite vulnerability
Zendframework potential Cross-site Scripting vector in `Zend_Service_ReCaptcha_MailHide`
Zend-Form vulnerable to Cross-site Scripting
Zendframework Potential XSS or HTML Injection vector in Zend_Json
Zend-HTTP URL Rewrite vulnerability
ZendFramework1 Potential Security Issues in Bundled Dojo Library
Zend-JSON vulnerable to XXE/XEE attacks
Zendframework Local file disclosure via XXE injection in Zend_XmlRpc
Zendframework Denial of Service vector via XEE injection
ZendFramework Cross-site Scripting vector in `Zend_Filter_StripTags`
Zend-Session session validation vulnerability
ZendFramework Potential Cross-site Scripting in Development Environment Error View Script
Zend-Mail remote code execution in zend-mail via Sendmail adapter
ZendFramework potential XML eXternal Entity injection vectors
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.