Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 853
Reset filtersCross site scripting in opencart
Zend-Navigation vulnerable to Cross-site Scripting
Zend-Form vulnerable to Cross-site Scripting
Zend-Session session validation vulnerability
ZendFramework potential Cross-site Scripting vector in `Zend_Dojo_View_Helper_Editor`
ZendFramework has potential Cross-site Scripting vector in multiple view helpers
Zendframework session validation vulnerability
Zendframework has potential Cross-site Scripting vector in multiple view helpers
Unsafe Reflection in base Component class in yiisoft/yii2
Reflected Cross-site Scripting in yiisoft/yii2 Debug mode
Symfony allows direct access of ESI URLs behind a trusted proxy
ScnSocialAuth Cross-site Scripting vulnerability in login redirect param
SimpleSAMLphp Reflected Cross-site Scripting vulnerability
SimpleSAMLphp Link Injection vulnerability
silverstripe/framework SQL injection in full text search
SilverStripe comments module includes version of jQuery vulnerable to Cross-site Scripting
Passbolt API Stored XSS on first/last name during setup
Neos Flow Information disclosure in entity security
Magento Patch SUPEE-10752 - Multiple security enhancements vulnerabilities
FOSRestBundle issue with broken validation of JSONP callbacks
Drupal Cross-Site Scripting (XSS) affecting CKEditor Third-party library
Drupal core Arbitrary PHP code execution
Drupal core uses a vulnerable Third-party library CKEditor
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.