Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,406
Reset filtersTYPO3 is susceptible to Cross-Site Flashing
Multiple Cross-Site Scripting vulnerabilities in TYPO3 backend
Password confirmation stored in plain text via registration form in statamic/cms
Unsafe Reflection in base Component class in yiisoft/yii2
Reflected Cross-site Scripting in yiisoft/yii2 Debug mode
Moodle Unsanitized HTML in site log for config_log_created
ExtJS JavaScript framework used in TYPO3 vulnerable to Cross-site Scripting
TYPO3 Arbitrary Shell Execution in Swiftmailer library
TYPO3 Cross-Site Scripting in Filelist Module
TYPO3 Broken Access Control in Import Module
TYPO3 Security Misconfiguration in Frontend Session Handling
TYPO3 Information Disclosure in Backend User Interface
TYPO3 Information Disclosure in User Authentication
TYPO3 Cross-Site Scripting in Form Framework
TYPO3 Cross-Site Scripting in Language Pack Handling
TYPO3 Arbitrary Code Execution via File List Module
TYPO3 Cross-Site Scripting in Fluid ViewHelpers
TYPO3 Security Misconfiguration for Backend User Accounts
TYPO3 Denial of Service in Frontend Record Registration
TYPO3 Cross-Site Scripting in Frontend User Login
TYPO3 Cross-Site Scripting in Backend Modal Component
TYPO3 Cross-Site Scripting in Online Media Asset Rendering
TYPO3 CMS Privilege Escalation and SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.