Critical
CVE-2014-4172
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,068
Reset filters
Medium
CVE-2014-5012
DOMPDF denial of service vulnerability
High
CVE-2014-5013
DOMPDF Remote Code Execution
Medium
CVE-2014-5011
DOMPDF Information Disclosure
High
CVE-2008-6507
phpBB vulnerable to sensitive information disclosure
High
CVE-2010-1630
phpBB vulnerability related to use of "forum id" in circumstances related to a "global announcement."
Medium
CVE-2010-2479
HTML Purifier Cross-site Scripting (XSS) vulnerability
Medium
CVE-2010-2958
phpMyAdmin Cross-site Scripting vulnerability
Low
CVE-2010-3094
Drupal cross-site scripting vulnerability via actions feature and trigger module
High
CVE-2010-3604
powermail extension for TYPO3 vulnerable to SQL Injection
Medium
CVE-2010-3715
TYPO3 cross-site scripting (XSS) vulnerability in the RemoveXSS function and the backend
High
CVE-2010-4335
CakePHP allows remote attackers to modify internal Cake cache and execute arbitrary code
High
CVE-2010-4481
phpMyAdmin allows remote attackers to bypass authentication and obtain sensitive information
High
CVE-2008-7252
phpMyAdmin unsafely handles temporary files
Low
CVE-2011-4332
Joomla! vulnerable to Cross-site Scripting
Medium
CVE-2011-1941
phpMyAdmin Open Redirect in redirector
Medium
CVE-2011-3744
HTML Purifier allows remote attackers to obtain sensitive information
Medium
CVE-2011-3712
CakePHP 1.3.7 allows remote attackers to obtain sensitive information via a direct request to a .php file
High
CVE-2010-4879
DOMPDF Remote File Inclusion Vulnerability
High
CVE-2010-3714
TYPO3 Remote File Disclosure vulnerability in the jumpUrl mechanism
Low
CVE-2012-4579
phpMyAdmin Multiple XSS Vulnerabilities
Medium
CVE-2012-1607
TYPO3 allows remote attackers to obtain the database name via a direct request
Medium
CVE-2012-1608
Typo3 API XSS Vulnerabilities
Low
CVE-2012-1606
Typo3 Backend XSS Vulnerabilities
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.