Low
CVE-2012-6147
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,068
Reset filters
Low
CVE-2012-6145
Typo3 Backend History Module Vulnerable to XSS
High
CVE-2013-1348
Symphony Vulnerable to PHP Code Injection via YAML Parsing
High
CVE-2013-1397
Symfony Arbitrary PHP code Execution
High
CVE-2013-4748
News system (news) extension for TYPO3 vulnerable to SQL Injection
Low
CVE-2013-5100
Static Methods since 2007 (div2007) extension for TYPO3 vulnerable to Cross-site Scripting
High
CVE-2013-5322
CoolURI extension for TYPO3 vulnerable to SQL Injection
Low
CVE-2013-5323
Static Info Tables (static_info_tables) extension TYPO3 vulnerable to Cross-site Scripting
Low
CVE-2013-7078
TYPO3 Cross-site scripting (XSS) vulnerability in the Extbase Framework
Low
CVE-2013-7074
TYPO3 Cross-Site Scripting (XSS) vulnerabilities in Content Editing Wizards component
Medium
CVE-2013-7082
TYPO3 Flow Cross-site scripting (XSS) vulnerability
Medium
CVE-2013-7077
TYPO3 Cross-site scripting (XSS) vulnerability in the Backend User Administration Module
Medium
CVE-2015-3257
zend-diactoros Cross-site Scripting (XSS)
Medium
CVE-2017-12870
SimpleSAMLphp Unauthenticated encryption in CBC mode
Medium
CVE-2017-12871
SimpleSAMLphp Incorrect IV generation for encryption
Medium
CVE-2014-8327
fal_sftp extension for TYPO3 uses weak permissions for sFTP driver files and folders
High
CVE-2014-8350
Smarty arbitrary PHP code execution
Critical
CVE-2017-14238
Dolibarr SQL injection vulnerability in admin/menus/edit.php
Critical
CVE-2017-14242
Dolibarr SQL injection vulnerability in don/list.php
Medium
CVE-2017-14241
Dolibarr ERP and CRM contain XSS Vulnerability
High
CVE-2017-14240
Dolibarr ERP and CRM Sensitive Data Disclosure
Medium
CVE-2017-14231
GeniXCMS denial of service (account blockage)
Medium
CVE-2017-14239
Dolibarr cross-site scripting (XSS) vulnerability
Medium
CVE-2017-12156
Moodle XSS Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.