Medium
CVE-2023-53929
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,068
Reset filters
Medium
ghsa-vvg7-8rmq-92g7
Auth0 WordPress has Improper Audience Validation via Auth0-PHP SDK Dependency
Medium
ghsa-f3r2-88mq-9v4g
Auth0 Symfony SDK has Improper Audience Validation via Auth0-PHP SDK
Medium
ghsa-7hh9-gp72-wh7h
Auth0 Laravel SDK has Improper Audience Validation via Auth0-PHP SDK dependency
Medium
CVE-2025-68129
Auth0-PHP SDK has Improper Audience Validation
Critical
CVE-2025-67165
Pagekit CMS has an Insecure Direct Object Reference (IDOR) in its User Role component
Critical
CVE-2025-67164
Pagekit CMS is vulnerable to OS Command Injection via Storage component
Unrated
CVE-2025-14840
drupal/http_client_manager - SA-CONTRIB-2025-126
Medium
CVE-2025-68113
ALTCHA Proof-of-Work Vulnerable to Challenge Splicing and Replay
Medium
CVE-2025-66843
Grav is vulnerable to Stored XSS through authenticated user-edited content
Critical
CVE-2025-66844
Grav may be vulnerable to SSRF attack via Twig Templates
Critical
CVE-2025-65854
MineAdmin has an insecure default password
High
CVE-2024-58303
FoF Pretty Mail has a server-side template injection vulnerability
Low
CVE-2025-67737
AzuraCast Vulnerable to Pre-Auth File Deletion & Admin RCE
Critical
CVE-2025-67719
Ibexa User Bundle is missing password change validation
Unrated
CVE-2025-14472
drupal/acquia_contenthub - SA-CONTRIB-2025-125
High
CVE-2025-67648
Shopware Storefront Reflected XSS in Storefront Login Page
Critical
ghsa-5j8p-438x-rgg5
SAML PHP Toolkit Vulnerability on xmlseclibs CVE-2025-66475
Critical
CVE-2025-67510
Neuron MySQLWriteTool allows arbitrary/destructive SQL when exposed to untrusted prompts (agent “footgun”)
High
CVE-2025-67509
Neuron MySQLSelectTool “read-only” bypass via `SELECT ... INTO OUTFILE` (file write → potential RCE)
High
CVE-2025-67507
Filament multi-factor authentication (app) recovery codes can be used multiple times
Medium
CVE-2025-66578
robrichards/xmlseclibs has an Libxml2 Canonicalization error which can bypass Digest/Signature validation
High
CVE-2025-65346
alexusmai laravel-file-manager is vulnerable to Directory Traversal via the unzip/extraction functionality
Low
CVE-2025-65345
alexusmai laravel-file-manager is vulnerable to Directory Traversal
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.