Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,406
Reset filtersSilverstripe cross-site scripting (XSS) attack in elemental "Content blocks in use" report
drupal/panels - SA-CONTRIB-2025-033
drupal/eca - SA-CONTRIB-2025-031
Shopware default newsletter opt-in settings allow for mass sign-up abuse
wallabag/wallabag Has Multiple Cross-Site Request Forgery (CSRF) Vulnerabilities
Magento does not properly protect credentials
Magento Improper Access Control leads to Security feature bypass
Magento Improper Access Control leads to Security feature bypass
Magento Improper Authorization vulnerability
Shopware Broken ACL on Document retrieval to access other customers documents
Shopware Vulnerable to Blind SQL-injection in DAL aggregations
Pimcore's Admin Classic Bundle allows HTML Injection
Shopware allows Denial Of Service via password length
Shopware 6 allows attackers to check for registered accounts through the store-api
GraphQL query operations security can be bypassed
API Platform Core can leak exceptions message that may contain sensitive information
Concrete CMS Vulnerable to Cross-Site Request Forgery (CSRF) and Cross-Site Scripting (XSS)
drupal/obfuscate - SA-CONTRIB-2025-029
drupal/access_code - SA-CONTRIB-2025-028
Yeswiki Path Traversal vulnerability allows arbitrary read of files
drupal/tfa - SA-CONTRIB-2025-023
drupal/ai - SA-CONTRIB-2025-021
drupal/ignition - SA-CONTRIB-2025-007
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.