Medium
CVE-2015-3397
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 388
Reset filters
Medium
CVE-2017-8384
Craft CMS XSS Vulnerability
High
CVE-2017-11675
Authenticated RCE in Zen Cart 1.5.5e
High
CVE-2016-6609
phpMyAdmin PHP code injection
High
CVE-2011-2506
phpMyAdmin vulnerable to static code injection
Medium
CVE-2011-2505
phpMyAdmin remote variable manipulation
Medium
CVE-2017-16790
Symfony SSRF Vulnerability via Form Component
Medium
CVE-2016-5730
phpMyAdmin full path disclosure vulnerability
High
CVE-2016-5706
phpMyAdmin Denial Of Service (DOS) attack
Medium
CVE-2017-6931
Drupal Settings Tray access bypass
Medium
CVE-2013-2083
Moodle is vulnerable to Improper Input Validation in MoodleQuickForm class
High
CVE-2013-4751
Symfony collectionCascaded and collectionCascadedDeeply fields security bypass
High
CVE-2022-25866
Command injection in czproject/git-php
Medium
CVE-2020-26138
FormField with square brackets in field name skips validation
Medium
ghsa-3fvf-2gp4-89wq
Possibility for Denial of Service by overwriting PHP files with language exports
Critical
CVE-2022-24752
DQL injection through sorting parameters blocked
Medium
CVE-2022-24742
Sensitive Information Exposure in Sylius
Medium
CVE-2022-24733
Improper Restriction of Rendered UI Layers or Frames in Sylius
Medium
CVE-2022-23598
Cross-site Scripting when rendering error messages in laminas-form
Critical
CVE-2020-20120
SQL Injection in topthink/thinkphp
Critical
CVE-2021-21426
Fixes a bug in Zend Framework's Stream HTTP Wrapper
Low
ghsa-7fjp-g4m7-fx23
User (Encrypted) Password Field Being Serialised
High
ghsa-x7p5-p2c9-phvg
Unexpected database bindings
High
CVE-2021-21263
Query Binding Exploitation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.