Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 400
Reset filtersShopware vulnerable to path traversal via Plugin upload
TYPO3 CMS exposes sensitive information in an error message
Mautic vulnerable to secret data extraction via elfinder
PocketMine-MP `ResourcePackDataInfoPacket` amplification vulnerability due to lack of resource pack sequence status checking
drupal/file_download - SA-CONTRIB-2025-089
starcitizentools/citizen-skin is vulnerable to Stored XSS attack in the legacy search bar through page descriptions
Pterodactyl Panel Allows Unauthenticated Arbitrary Remote Code Execution
drupal/admin_audit_trail - SA-CONTRIB-2025-068
drupal/cookies - SA-CONTRIB-2025-076
drupal/etracker - SA-CONTRIB-2025-074
TYPO3 Allows Unrestricted File Upload in File Abstraction Layer
TYPO3 Allows Information Disclosure via DBAL Restriction Handling
drupal/single_content_sync - SA-CONTRIB-2025-060
drupal/events_log_track - SA-CONTRIB-2025-059
drupal/piwik_pro - SA-CONTRIB-2025-058
drupal/cookies - SA-CONTRIB-2025-049
Moodle allows unauthenticated REST API user data exposure
ibexa/fieldtype-richtext allows access to external entities in XML
ezsystems/ezplatform-richtext allows access to external entities in XML
API Platform Core can leak exceptions message that may contain sensitive information
drupal/matomo - SA-CONTRIB-2025-008
drupal/ai - SA-CONTRIB-2025-003
Sylius PayPal Plugin Payment Amount Manipulation Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.