Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,071
Reset filtersyiisoft/yii deserializing untrusted user input can lead to remote code execution
Microweber Improper Access Control vulnerability
Information Disclosure in typo3/cms-install tool
Bypassing Cross-Site Scripting Protection in TYPO3 HTML Sanitizer
Guest Entries Remote code execution via file uploads
TYPO3 vulnerable to Weak Authentication in Session Handling
Statamic CMS remote code execution via front-end form uploads
Symfony potential Cross-site Scripting in WebhookController
Symfony potential Cross-site Scripting vulnerabilities in CodeExtension filters
Symfony possible session fixation vulnerability
Froxlor Improper Input Validation vulnerability
Moodle Exposure of Sensitive Information to an Unauthorized Actor vulnerability
Moodle Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability
Moodle Improper Access Control vulnerability
Moodle Cross-site Scripting vulnerability
Moodle Cross-site Scripting vulnerability
Moodle Exposure of Sensitive Information to an Unauthorized Actor vulnerability
Moodle Code Injection vulnerability
Moodle Code Injection vulnerability
Moodle Cross-site Scripting vulnerability
Moodle Improper Access Control vulnerability
Moodle Cross-site Scripting vulnerability
Moodle Code Injection vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.