Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 37
Reset filtersShopware Has Improper Control of Generation of Code in Twig rendered views
Shopware Storefront Reflected XSS in Storefront Login Page
Shopware Customer Orders can be canceled, even if refunds are disabled
Shopware: Reflective Cross Site-Scripting (XSS) in CMS components
Shopware Remote Code Execution Vulnerability
Shopware Remote Code Execution Vulnerability
Shopware Non-Persistent XSS in the Frontend
Shopware Remote Code Execution Vulnerability
Shopware improper mail validation vulnerability
Shopware dependency configuration exposed
Shopware vulnerable to cross-site scripting (XSS)
Shopware contains sensitive data in backend customer module
Shopware access control list bypassed via crafted specific URLs
Shopware vulnerable to persistent cross site scripting (XSS) in customer module
Authenticated Stored Cross-site Scripting in Shopware
Shopware Cross-site Scripting Vulnerability
Shopware database password is leaked to an unauthenticated users
Shopware Insecure Deserialization Vulnerability
Shopware XSS Vulnerability
Shopware RCE Vulnerability
Shopware SQL Injection
Shopware XXE Vulnerability
Multiple valid tokens for password reset in Shopware
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.