Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,071
Reset filtersTYPO3 Denial of Service in Frontend Record Registration
TYPO3 Denial of Service in Online Media Asset Handling
TYPO3 Information Disclosure in Install Tool
TYPO3 Security Misconfiguration in Install Tool Cookie
TYPO3 Cross-Site Scripting in Frontend User Login
TYPO3 Cross-Site Scripting in Backend Modal Component
TYPO3 CMS Insecure Deserialization
TYPO3 Cross-Site Scripting in Online Media Asset Rendering
TYPO3 CMS Privilege Escalation and SQL Injection
TYPO3 CMS Insecure Deserialization & Arbitrary Code Execution
TYPO3 CMS Authentication Bypass vulnerability
Twig Path Traversal vulnerability in the filesystem loader
titon/framework vulnerable to Remote Code Execution via Chosen-Ciphertext Attack
Thelia authentication bypass vulnerability
Thelia BackOffice default template vulnerable to Cross-site Scripting
Thelia Cross-site Scripting vulnerability in BackOffice
symfony/validator XML Entity Expansion vulnerability
symfony/translation XML Entity Expansion vulnerability
Symfony Cross-Site Request Forgery vulnerability in the Web Profiler
Symfony2 improper IP based access control
Symfony XML Entity Expansion security vulnerability
Symfony XML decoding attack vector through external entities
Symfony may allow a user to switch to using another user's identity
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.