Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,068
Reset filtersBacula-web SQL Injection Vulnerabilities
phpMyAdmin Directory Traversal vulnerability
phpMyAdmin vulnerable to static code injection
phpMyAdmin remote variable manipulation
DOMPDF Arbitrary File Read
Silverstripe CMS Open Redirect
TYPO3 cross-site scripting (XSS)
Symfony Session Fixation Vulnerability
CakePHP might allow remote attackers to bypass CSRF protection mechanism via the _method parameter
Shopware RCE Vulnerability
SilverStripe vulnerable to Cross-site Scripting
MantisBT Cross-site Scripting vulnerability
ImpressCMS Cross-site Scripting vulnerability via quicksearch_ContentContent parameter
Symfony SSRF Vulnerability via Form Component
PHPMailer susceptible to arbitrary code execution
Pimcore SQLi Vulnerability
Pimcore CSRF Vulnerability
Symfony Host Header Injection
Gleez CMS CSRF Allows Adding of Administrator Accounts
Elefant CMS Improper Input Validation
OpenCart-Overclocked Cross-site Scripting Vulnerability
zend-mail remote code execution via Sendmail adapter
Zend Framework Allows SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.