Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,070
Reset filtersCross-site scripting (XSS) vulnerability in Description metadata
TYPO3 Arbitrary Code Execution via File List Module
TYPO3 Denial of Service in Frontend Record Registration
TYPO3 Information Disclosure of Installed Extensions
TYPO3 Cross-Site Scripting in Form Framework validation handling
TYPO3 Cross-Site Scripting in Form Framework
TYPO3 Security Misconfiguration for Backend User Accounts
TYPO3 Cross-Site Scripting in Link Handling
TYPO3 Broken Access Control in Localization Handling
TYPO3 Cross-Site Scripting in Filelist Module
TYPO3 Cross-Site Scripting in Fluid ViewHelpers
TYPO3 CMS Possible Insecure Deserialization in Extbase Request Handling
TokenController formName not sanitized in hidden input
Improper Authentication in CraftCMS two factor authentication plugin
Password hash exposed in CraftCMS two factor authentication plugin
typo3 Security fix for Flow Swift Mailer package
Insecure Unserialize Vulnerability in FLOW3
typo3 Information Disclosure Security Note
Typo3 Arbitrary file upload and XML External Entity processing
By-passing Protection of PharStreamWrapper Interceptor
Time-Based Information Disclosure Vulnerability in Flow
Privilege Escalation in TYPO3 Neos
Flow Bugfix Releases for Entity Security
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.