Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,070
Reset filtersMicroweber contains Cross-site Scripting
Dompdf vulnerable to URI validation failure on SVG parsing
Froxlor contains Business Logic Errors
Froxlor contains Static Code Injection
Froxlor contains Unchecked Error Condition
CImage Cross-site Scripting vulnerability
Froxlor contains Weak Password Requirements
DataFlow upload remote code execution vulnerability
Fix for authenticated remote code execution through layout update
DoS vulnerability in MaliciousCode filter
Fix for arbitrary file deletion in customer media allows for remote code execution
Fix for arbitrary command execution in custom layout update through blocks
phpmyadmin contains SQL Injection vulnerability
symfont/process typosquatting malware spoofs symfony/process
magento-lts Reset Password not protected against well-timed CSRF
Command injection in yiisoft/yii2-gii
CakePHP vulnerable to Cross-site Scripting in some development error pages
CakePHP vulnerable to Remote File Inclusion through View template name manipulation
CakePHP allows direct access of prefixed controller actions
CakePHP vulnerable to Denial of Service attack through XML payloads
CakePHP SecurityComponent cross form submission issue
Shopware has Improper Input Validation issue in newsletter subscription
Shopware has Insufficient Session Expiration in Administration
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.