High
CVE-2010-3714
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,404
Reset filters
Medium
CVE-2012-1607
TYPO3 allows remote attackers to obtain the database name via a direct request
Medium
CVE-2012-5368
phpMyAdmin Unsafe Fetching of Javascript Code
High
CVE-2012-4399
CakePHPallows remote attackers to read arbitrary files via XML data containing external entity references
Medium
CVE-2014-0808
EC-CUBE vulnerable to authorization bypass
High
CVE-2014-2921
Pimcore Vulnerable to PHP Object Injection Attacks
Medium
CVE-2014-3946
Typo3 Information Disclosure
Critical
CVE-2014-3945
TYPO3 vulnerable to authentication bypass via leveraging knowledge of password hash
High
CVE-2014-4672
Yii PHP Framework arbitrary PHP scripts execution
Medium
CVE-2014-6288
TYPO3 powermail extension allows remote attackers to bypass CAPTCHA protection mechanism
High
CVE-2014-3947
TYPO3 powermail extension has unrestricted file upload vulnerability
Medium
CVE-2015-8760
TYPO3 allows remote attackers to embed Flash videos from external domain
Medium
CVE-2016-1912
Dolibarr ERP and CRM contain XSS Vulnerabilities
High
CVE-2016-3169
Drupal saving user accounts can sometimes grant the user all roles
Medium
CVE-2016-3170
Drupal sensitive information disclosure
High
CVE-2016-1902
Symfony Cryptographic Vulnerability
High
CVE-2013-4701
PHP OpenID Library Denial of Service vulnerability
Medium
CVE-2014-9508
Typo3 Open Redirect In Frontend Rendering
Medium
CVE-2016-6212
Drupal Views can allow unauthorized users to see Statistics information
High
CVE-2016-6211
Drupal Saving user accounts can sometimes grant the user all roles
High
CVE-2016-9450
Drupal Incorrect cache context on password reset page
Medium
CVE-2015-2308
Symfony Vulnerable to PHP Eval Injection
Medium
CVE-2016-2562
phpMyAdmin Improper Input Validation
Medium
CVE-2015-3935
Dolibarr ERP and CRM contain Cross-site Scripting Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.