High
ghsa-cxf7-m5g2-v594
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 67
Reset filters
Medium
ghsa-mg7h-9qfx-4r83
ZendFramework Potential Proxy Injection Vulnerabilities
Medium
ghsa-62f6-h68r-3jpw
Zendframework session validation vulnerability
Medium
ghsa-cg4m-qjjp-7497
TYPO3 Cross-Site Scripting in link validator component
High
ghsa-4vf2-qfg3-7598
symfony/validator XML Entity Expansion vulnerability
Low
ghsa-9wrw-p9rm-r782
onelogin/php-saml Improper signature validation on LogoutRequest/LogoutResponse.
Medium
ghsa-p9fg-j6ww-953m
FOSRestBundle issue with broken validation of JSONP callbacks
High
CVE-2023-40035
Craft CMS vulnerable to Remote Code Execution via validatePath bypass
Medium
CVE-2023-22730
Shopware vulnerable to Improper Input Validation of Clearance sale in cart
High
CVE-2020-9309
Silverstripe CMS malicious file upload enables script execution
Critical
CVE-2017-11365
Symfony Incorrect Access Control
Critical
CVE-2014-4172
Jasig Java CAS Client, .NET CAS Client, and phpCAS contain URL parameter injection vulnerability
High
CVE-2015-1786
Zend Framework CSRF Vulnerability
Medium
CVE-2016-5730
phpMyAdmin full path disclosure vulnerability
High
CVE-2013-4751
Symfony collectionCascaded and collectionCascadedDeeply fields security bypass
High
CVE-2021-3603
PHPMailer untrusted code may be run from an overridden address validator
Medium
CVE-2021-32697
Form validation can be skipped
High
CVE-2021-29460
Cross-site scripting (XSS) from unsanitized uploaded SVG files in Kirby
Medium
CVE-2016-9955
Incorrect signature verification in SimpleSAMLphp
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.