Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,406
Reset filtersSQL injection in opencart
FriendlyCaptcha Plugin for TYPO3 Captcha Check Bypass
TinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable_regexp option
TinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elements
Moodle BigBlueButton web service leaks meeting joining information
Moodle HTTP authorization header is preserved between "emulated redirects"
Firefly III has a MFA bypass in oauth flow
Magento Open Source Improper Authentication vulnerability
Magento Open Source Incorrect Authorization vulnerability
Magento Open Source Improper Authorization vulnerability
Magento Open Source Cross-Site Scripting (XSS) vulnerability
Magento Open Source Improper Access Control vulnerability
Composer has a command injection via malicious git branch name
Composer has multiple command injections via malicious git/hg branch names
ZendOpenID potential security issue in login mechanism
Zendframework1 Potential SQL injection in ORDER and GROUP functions
Zendframework1 potential SQL injection vector using null byte for PDO (MsSql, SQLite)
ZendFramework1 Potential SQL injection in the ORDER implementation of Zend_Db_Select
Zendframework potential security issue in login mechanism
Adminer file disclosure vulnerability
Zend_Filter_StripTags vulnerable to Cross-site Scripting when comments allowed
Zend-Diactoros URL Rewrite vulnerability
Zend-Feed URL Rewrite vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.