Critical
CVE-2006-0931
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,393
Reset filters
High
CVE-2006-0868
PEAR::Auth potential authentication bypass vulnerability
High
CVE-2005-4875
TYPO3 Reveals Sensitive Information via Direct Request to `misc/phpcheck/`
Medium
CVE-2022-0984
Missing authorization in Moodle
High
ghsa-f6p5-76fp-m248
URL Rewrite vulnerability in multiple zendframework components
Medium
CVE-2022-24892
Multiple valid tokens for password reset in Shopware
High
CVE-2022-24872
Improper Access Control in Shopware
High
CVE-2022-24871
Server-Side Request Forgery (SSRF) in Shopware
High
CVE-2022-51012
Insufficient type validation in pocketmine/pocketmine-mp
High
CVE-2022-24828
Missing input validation can lead to command execution in composer
Medium
CVE-2011-4632
Typo3 XSS Vulnerabilities
Medium
CVE-2010-3673
TYPO3 is vulnerable to Information Disclosure in the HTML mailing API
Medium
CVE-2010-3670
TYPO3 is vulnerable to insecure randomness during hash generation in forgot password function
Medium
CVE-2010-3667
TYPO3 is vulnerable to Spam Abuse in the native form content element
Medium
CVE-2010-3666
TYPO3 is vulnerable to Insecure randomness in uniqid function
High
CVE-2010-3663
TYPO3 Arbitrary Code Execution vulnerability on the backend
High
CVE-2009-20001
MantisBT Insufficient Session Expiration cookie string not reset after logout
High
CVE-2022-25273
Drupal core - SA-CORE-2022-008
High
CVE-2021-43257
MantisBT CSV Injection unprivileged user access in csv_export.php
Medium
CVE-2020-29653
HTML Injection in Froxlor
High
CVE-2022-24833
Persistent Cross-site Scripting vulnerability in PrivateBin
High
CVE-2021-43515
Improper Neutralization of Formula Elements in a CSV File in Kimai 2
High
CVE-2016-5385
HTTP Proxy header vulnerability
High
CVE-2022-1235
Weak password hash in LiveHelperChat
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.