Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,216
Reset filtersZend-Feed URL Rewrite vulnerability
Zend-HTTP URL Rewrite vulnerability
ZendFramework potential Cross-site Scripting vectors due to inconsistent encodings
Zendframework URL Rewrite vulnerability
ZendFramework Potential Proxy Injection Vulnerabilities
Zendframework Remote Address Spoofing Vector in `Zend\Http\PhpEnvironment\RemoteAddress`
TYPO3 Denial of Service in Online Media Asset Handling
TYPO3 Cross-Site Scripting in Online Media Asset Rendering
TYPO3 Arbitrary Code Execution via File List Module
TYPO3 Cross-Site Scripting in Filelist Module
Typo3 Arbitrary file upload and XML External Entity processing
Cross-Site Scripting (XSS) vulnerabilities in Neos
Arbitrary Code Execution in TYPO3 CMS
Remote code execution in web server context
Flooding Server with Thumbnail files
Unsafe Reflection in base Component class in yiisoft/yii2
Moodle Authenticated LFI risk in some misconfigured shared hosting environments
Moodle Authenticated LFI risk in some misconfigured shared hosting environments
Moodle Authenticated LFI risk in some misconfigured shared hosting environments
Moodle Authenticated LFI risk in some misconfigured shared hosting environments
Moodle Improper Input Validation
TYPO3 Frontend vulnerable to Unauthenticated Path Disclosure
TYPO3 Cross-Site Scripting in Filelist Module
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.