Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 423
Reset filtersbaserCMS has a Cross-site Scripting (XSS) Vulnerability in HTTP 400 Bad Request
baserCMS has a Cross-site Scripting (XSS) Vulnerability in Blog posts and Contents list Feature
Minecraft MOTD Parser's HtmlGenerator vulnerable to XSS
Pimcore includes vulnerable PHPOffice/PhpSpreadsheet
Pimcore vulnerable to disclosure of system and database information behind /admin firewall
Dolibarr ERP CRM vulnerable to remote code execution (RCE)
Dolibarr arbitrary file upload vulnerability
Zend-Mail remote code execution in zend-mail via Sendmail adapter
ZendFramework potential remote code execution in zend-mail via Sendmail adapter
ZendFramework SQL injection due to execution of platform-specific SQL containing interpolations
Symfony may allow a user to switch to using another user's identity
Dolibarr vulnerable to SQL Injection
Dolibarr vulnerable to SQL Injection
Silverstripe Cross-site scripting vulnerability in VersionedRequestFilter
Magento Patch SUPEE-10752 - Multiple security enhancements vulnerabilities
eZ Platform Admin UI is vulnerable to Cross-site Scripting (XSS)
Ez Platform and Legacy are prone to an insecure interpretation of PHP/PHAR uploads
eZ Platform Admin UI Cross-site Scripting vulnerability
eZ Platform Editor Cross-site Scripting (XSS)
easyadmin-extension-bundle action case insensitivity
Blind XSS Leading to Froxlor Application Compromise
mdanter/ecc affected by timing vulnerability in cryptographic side-channels
Dolibarr vulnerable to Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.