Medium
CVE-2011-2674
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,393
Reset filters
Medium
CVE-2017-7725
Concrete CMS vulnerable to cross-site scripting (XSS)
High
CVE-2022-1397
Privilege escalation in easyappointments
High
CVE-2022-1631
Incorrect Authorization in microweber
High
CVE-2022-29933
Improper account password reset in Craft CMS
High
CVE-2013-4751
Symfony collectionCascaded and collectionCascadedDeeply fields security bypass
Medium
CVE-2022-1571
Cross-site Scripting in FacturaScripts
Medium
CVE-2022-1555
Microweber vulnerable to cross-site scripting (XSS)
Unrated
drupal-contrib-2022-036
drupal/image_field_caption - SA-CONTRIB-2022-036
Unrated
drupal-contrib-2022-035
drupal/dfp - SA-CONTRIB-2022-035
Medium
CVE-2022-21149
SCart is vulnerable to cross-site scripting (XSS)
High
CVE-2022-1544
Improper neutralization of formula elements in yii-helpers
Critical
CVE-2022-28056
Incorrect Permission Assignment for Critical Resource in ShopXO
High
CVE-2010-0329
TYPO3 powermail Extension Vulnerable to SQL Injection via Unspecified Vectors
Medium
CVE-2009-4160
TYPO3 Simple Download-System with Counter and Categories Vulnerable to Information Disclosure
Low
CVE-2009-4159
TYPO3 Direct Mail Extension Vulnerable to Cross-Site Scripting (XSS)
Medium
CVE-2009-3635
TYPO3 Install Tool Subcomponent Allows Access Using Only a Password's MD5 Hash as a Credential
High
CVE-2009-1264
Frontend User Registration extension for TYPO3 does not properly verify access rights
High
CVE-2009-0258
Indexed Search Engine for TYPO3 Command Execution via Metacharacter Injection
Medium
CVE-2008-3228
Joomla! doesn't configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs
Medium
CVE-2008-1502
Moodle vulnerable to Cross-site scripting
Medium
CVE-2007-4190
Joomla! vulnerable to CRLF injection
Medium
CVE-2006-4067
Cross-site scripting (XSS) vulnerability in CakePHP
Medium
CVE-2006-3360
phpSysInfo allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) sequence
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.