Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,070
Reset filtersCross-Site Scripting in third party library mso/idna-convert
Information Disclosure in TYPO3 Backend
SQL Injection in TYPO3 Frontend Login
Missing Access Check in TYPO3 CMS
Insecure Unserialize in TYPO3 Import/Export
Cross-Site Scripting in TYPO3 Backend
Privilege Escalation in TYPO3 CMS
Cross-Site Scripting in TYPO3 Backend
Authentication Bypass in TYPO3 CMS
Digital products download without proper payment status check
Remote code execution in web server context
Vulnerable embedded jQuery Version
Flooding Server with Thumbnail files
Denial of Service (DoS) attack possibility in TYPO3 component Indexed Search
Typo3 Arbitrary File Disclosure in Form Component
Cross-Site Scripting (XSS) in TYPO3 component CSS styled content
XML External Entity (XXE) Processing in TYPO3 Core
Cross-Site Scripting (XSS) in TYPO3 component Backend
Reflected Cross-Site Scripting (XSS) in Dolibarr
TYPO3 Cross-Site Scripting (XSS) in form component
TYPO3 Cross-Site Scripting in legacy form component
TYPO3 Cross-Site Scripting in link validator component
TYPO3 Multiple Cross-Site Scripting vulnerabilities in frontend
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.