Medium
CVE-2025-27411
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,221
Reset filters
Medium
CVE-2022-25773
Mautic allows Relative Path Traversal in assets file upload
Critical
ghsa-c2p2-hgjg-9r3f
Crayfish Allows Remote Code Execution via hypercube X-Islandora-Args Header
Medium
CVE-2025-23210
PhpSpreadsheet allows bypassing of XSS sanitizer using the javascript protocol and special characters
Medium
CVE-2024-55417
DevDojo Voyager Arbitrary File Write
Medium
CVE-2024-11956
pimcore/customer-data-framework vulnerable to SQL Injection
High
CVE-2025-24018
Authenticated Stored XSS in YesWiki
High
CVE-2025-24017
Unauthenticated DOM Based XSS in YesWiki
Medium
CVE-2025-23200
LibreNMS Misc Section Stored Cross-site Scripting vulnerability
Medium
CVE-2025-22145
Carbon has an arbitrary file include via unvalidated input passed to Carbon::setLocale
Medium
CVE-2025-21617
Guzzle OAuth Subscriber has insufficient nonce entropy
Medium
CVE-2024-56412
PhpSpreadsheet allows bypass XSS sanitizer using the javascript protocol and special characters
Medium
CVE-2024-56411
PhpSpreadsheet has a Cross-Site Scripting (XSS) vulnerability of the hyperlink base in the HTML page header
Medium
CVE-2024-56410
PhpSpreadsheet has a Cross-Site Scripting (XSS) vulnerability in custom properties
High
CVE-2024-56408
PhpSpreadsheet allows unauthorized Reflected XSS in `Convert-Online.php` file
Medium
CVE-2024-56517
LGSL has a reflected XSS at /lgsl_files/lgsl_list.php
High
CVE-2024-56361
lgsl Stored Cross-Site Scripting vulnerability
High
CVE-2024-21547
Spatie Browsershot Directory Traversal vulnerability
Medium
CVE-2024-21544
Browsershot Local File Inclusion
High
CVE-2024-54149
Winter CMS Modules allows a sandbox bypass in Twig templates leading to data modification and deletion
High
CVE-2024-54141
phpMyFAQ Generates an Error Message Containing Sensitive Information if database server is not available
Unrated
CVE-2024-13301
drupal/miniorange_oauth_client - SA-CONTRIB-2024-067
Medium
ghsa-fh7v-q458-7vmw
ibexa/http-cache affected by Breach with Varnish VCL
Medium
ghsa-mgfg-7533-7jf6
ezsystems/ezplatform-http-cache affected by Breach with Varnish VCL
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.