High
CVE-2014-4672
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,068
Reset filters
High
CVE-2014-6289
yag and pt_extbase extensions for TYPO3 allow remote attackers to bypass access restrictions
Low
CVE-2014-6296
WEC Map (wec_map) extension for TYPO3 allows Cross-site Scripting
High
CVE-2014-6295
WEC Map (wec_map) extension for TYPO3 allows SQL Injection
Medium
CVE-2014-6288
TYPO3 powermail extension allows remote attackers to bypass CAPTCHA protection mechanism
High
CVE-2014-3947
TYPO3 powermail extension has unrestricted file upload vulnerability
Low
CVE-2011-3591
phpMyAdmin Multiple XSS Vulnerabilities After Inline Editing and Save
Low
CVE-2011-3592
phpMyAdmin Multiple XSS Vulnerabilities
Medium
CVE-2013-6919
phpThumb is vulnerable to Server-Side Request Forgery (SSRF)
Medium
CVE-2013-5958
Symfony Denial of Service Via Long Password Hashing
High
CVE-2014-9509
Typo3 Vulnerable to Cache Poisoning
Medium
CVE-2015-1039
ZF-Commons ZfcUser Vulnerable to XSS in Login Redirect
Medium
CVE-2014-1836
ImpressCMS Path Traversal to Arbitrary File Delete
High
CVE-2011-2687
Drupal Access Control Bypass
Medium
CVE-2015-5612
October CMS XSS In Caption Tag of Profile
Medium
CVE-2014-5191
The Preview plugin in CKEditor allows Cross-site scripting (XSS)
Medium
CVE-2014-2853
Cross-site scripting vulnerability in includes/actions/InfoAction.php
Medium
CVE-2012-4437
Cross-site Scripting in SmartyException
High
CVE-2015-8566
Joomla! Framework Remote Code Injection Vulnerability
Medium
CVE-2015-8759
TYPO3 Cross-site Scripting vulnerability
Medium
CVE-2015-8756
TYPO3 CMS indexed search Cross-site Scripting vulnerability
Medium
CVE-2015-8760
TYPO3 allows remote attackers to embed Flash videos from external domain
Medium
CVE-2015-8755
Typo3 XSS Vulnerability
Medium
CVE-2016-1912
Dolibarr ERP and CRM contain XSS Vulnerabilities
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.