High
CVE-2025-24409
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,406
Reset filters
Medium
CVE-2025-24424
Magento Improper Access Control vulnerability
High
CVE-2025-24417
Magento Stored Cross-Site Scripting (XSS) Vulnerability
High
CVE-2025-24416
Magento Stored Cross-Site Scripting (XSS) Vulnerability
High
CVE-2025-24415
Magento Stored Cross-Site Scripting (XSS) Vulnerability
High
CVE-2025-24414
Magento Stored Cross-Site Scripting (XSS) Vulnerability
High
CVE-2025-24413
Magento Stored Cross-Site Scripting (XSS) Vulnerability
High
CVE-2025-24412
Magento Stored Cross-Site Scripting (XSS) Vulnerability
High
CVE-2025-24411
Magento Improper Access Control vulnerability
High
CVE-2025-24410
Magento Stored Cross-Site Scripting (XSS) Vulnerability
Medium
CVE-2025-24408
Magento Information Exposure vulnerability
Medium
CVE-2024-13209
Stored XSS in REDAXO
High
ghsa-2237-5r9w-vm8j
Connect-CMS information that is restricted to viewing is visible
Critical
ghsa-vrpv-vw92-328g
Multiple rtmpdump vulnerabilities
Unrated
CVE-2025-3062
drupal/druadmin_lte_theme - SA-CONTRIB-2025-010
Medium
CVE-2025-24856
TYPO3-EXT-SA-2025-001: Account Takeover in extension "OpenID Connect Authentication" (oidc)
Medium
CVE-2024-11956
pimcore/customer-data-framework vulnerable to SQL Injection
High
CVE-2024-11954
Pimcore Authenticated Stored Cross-Site Scripting (XSS) Via Search Document
Unrated
CVE-2025-3061
drupal/material_admin - SA-CONTRIB-2025-006
Low
CVE-2025-24027
ps_contactinfo has potential XSS due to usage of the nofilter tag in template
Medium
CVE-2025-22131
Cross-Site Scripting (XSS) vulnerability in generateNavigation() function in PhpSpreadsheet
High
CVE-2025-24019
Authenticated arbitrary file deletion in YesWiki
High
CVE-2025-24018
Authenticated Stored XSS in YesWiki
High
CVE-2025-24017
Unauthenticated DOM Based XSS in YesWiki
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.