Medium
ghsa-5gmf-3c43-q73v
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
ghsa-gff2-p6vm-3p8g
ZendFramework potential remote code execution in zend-mail via Sendmail adapter
Medium
ghsa-mg7h-9qfx-4r83
ZendFramework Potential Proxy Injection Vulnerabilities
Medium
ghsa-2fhr-8r8r-qp56
ZendFramework Information Disclosure and Insufficient Entropy vulnerability
High
ghsa-x2f4-8wxf-w3vf
ZendFramework SQL injection due to execution of platform-specific SQL containing interpolations
Critical
ghsa-qc7w-4567-84wv
Zendframework vulnerable to XXE/XEE attacks
High
ghsa-xg9w-r469-m455
ZendFramework Potential Information Disclosure and Insufficient Entropy vulnerabilities
Medium
ghsa-62f6-h68r-3jpw
Zendframework session validation vulnerability
High
ghsa-jq87-2wxp-8349
ZendFramework Route Parameter Injection Via Query String in `Zend\Mvc`
Medium
ghsa-8q77-cv62-jj38
Zendframework has potential Cross-site Scripting vector in multiple view helpers
High
ghsa-xffp-6w68-4775
Zendframework Remote Address Spoofing Vector in `Zend\Http\PhpEnvironment\RemoteAddress`
Medium
ghsa-f3wf-q4fj-3gxf
TYPO3 Denial of Service in Online Media Asset Handling
Medium
ghsa-6487-3qvg-8px9
TYPO3 Information Disclosure in Install Tool
High
ghsa-f777-f784-36gm
TYPO3 Security Misconfiguration in Install Tool Cookie
Medium
ghsa-2rcw-9hrm-8q7q
TYPO3 Cross-Site Scripting in Frontend User Login
Medium
ghsa-7q33-hxwj-7p8v
TYPO3 Cross-Site Scripting in Backend Modal Component
Medium
ghsa-8m6j-p5jv-v69w
TYPO3 Cross-Site Scripting in Online Media Asset Rendering
Medium
CVE-2024-37160
Cross-site scripting (XSS) vulnerability in Description metadata
Medium
CVE-2024-4468
Salon booking system <= 9.9 - Missing Authorization
High
ghsa-8h4m-r4wm-xj7r
TYPO3 Arbitrary Code Execution via File List Module
High
ghsa-g585-crjf-vhwq
TYPO3 Denial of Service in Frontend Record Registration
Medium
ghsa-f624-8hfq-5fh3
TYPO3 Information Disclosure of Installed Extensions
Medium
ghsa-v8m4-3w37-ghxx
TYPO3 Cross-Site Scripting in Form Framework validation handling
Medium
ghsa-4h5c-5g25-v7fh
TYPO3 Cross-Site Scripting in Form Framework
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.