Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,070
Reset filtersSilverstripe External redirection risk in Security?ReturnURL
Silverstripe X-Forwarded-Host request hostname injection
Silverstripe XSS in Director::force_redirect()
Silverstripe XSS In FormAction
Silverstripe XSS In rewritten hash links
Silverstripe XSS In GridField print
Silverstripe XSS in TreeDropdownField and TreeMultiSelectField
SilverStripe framework XML Quadratic Blowup Attack
Silverstripe IE requests not properly behaving with rewritehashlinks
Silverstripe Forum Module CSRF Vulnerability
VuFind Server-Side Request Forgery (SSRF) vulnerability
VuFind Server-Side Request Forgery (SSRF) vulnerability
Silverstripe SiteTree Creation Permission Vulnerability
Silverstripe XSS vulnerability via VirtualPage
Silverstripe History XSS Vulnerability
Silverstripe admin XSS Vulnerability via WYSIWYG editor
drupal/commerce_view_receipt - SA-CONTRIB-2024-021
drupal/email_contact - SA-CONTRIB-2024-020
Shopware Remote Code Execution Vulnerability
Shopware Remote Code Execution Vulnerability
Shopware Non-Persistent XSS in the Frontend
Shopware Remote Code Execution Vulnerability
sensiolabs/connect has a Cross-Site Request Forgery Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.