Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,068
Reset filtersSQL Injection in usmanhalalit/pixie
XXE in PHPSpreadsheet due to incomplete fix for previous encoding issue
XXE in PHPSpreadsheet due to encoding issue
Timing attacks might allow practical recovery of the long-term private key
Unauthenticated crypto and weak IV in Magento\Framework\Encryption
Symfony Service IDs Allow Injection
drupal/commerce_ingenico - SA-CONTRIB-2019-089
drupal/sendinblue - SA-CONTRIB-2019-088
drupal/bugsnag - SA-CONTRIB-2019-081
drupal/nexus - SA-CONTRIB-2019-078
SilverStripe Priviledge escalation through cache pollution
Lack of access control on upoaded files
Session fixation in change password form
Missing warning can lead to unauthenticated admin access in SilverStripe
SilverStripe Versioned Files module Unpublished files are exposed publicly
Symfony Cross-site Scripting (XSS) vulnerability
Composer JavaScript injection possible via html comments
Magento Cross-Site Scripting via Attribute Set Name
Bypass of sitemp access restrictions
Remote code execution via vulnerable Symphony dependecy injection
Using JS libraries with known security vulnerabilities
Information disclosure through processing of external XML entities
Signature validation bypass in XmlSecLibs
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.