Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,406
Reset filtersMagneto contains stored XSS vulnerability
Magento Improper Access Control leads to security feature bypass
HAX CMS vulnerable to Local File Inclusion via saveOutline API Location Parameter
Hax CMS Stored Cross-Site Scripting vulnerability
laravel-auth0 SDK Deserialization of Untrusted Data vulnerability
Auth0 Symfony SDK Deserialization of Untrusted Data vulnerability
Yii 2 Redis may expose AUTH parameters in logs in case of connection failure
Auth0 Wordpress Plugin vulnerable to Deserialization of Untrusted Data
Auth0-PHP SDK Deserialization of Untrusted Data vulnerability
Roundcube Webmail Vulnerable to Authenticated RCE via PHP Object Deserialization
PHPOffice Math allows XXE when processing an XML file in the MathML format
drupal/cookies - SA-CONTRIB-2025-075
drupal/simple_klaro - SA-CONTRIB-2025-073
Mautic has an Open Redirect vulnerability on user unlock path.
Mautic segment cloning doesn't have a proper permission check
Mautic allows user name enumeration due to response time difference on password reset form
Mautic does not shield .env files from web traffic
TYPO3 Allows Privilege Escalation to System Maintainer
TYPO3 Allows Unrestricted File Upload in File Abstraction Layer
TYPO3 Unverified Password Change for Backend Users
TYPO3 CMS Webhooks Server Side Request Forgery
Symfony UX allows unsanitized HTML attribute injection via ComponentAttributes
Sulu vulnerable to XXE in SVG File upload Inspector
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.