Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,068
Reset filtersMoonShine SQL Injection Vulnerability
MoonShine Arbitrary File Upload Vulnerability
LibreNMS allows stored XSS in Alert Template name field
drupal/layout_builder_perms - SA-CONTRIB-2025-097
drupal/alogin - SA-CONTRIB-2025-096
Soosyze CMS's /user/login endpoint missing rate-limiting and lockout mechanisms
svg-sanitizer Bypasses Attribute Sanitization
Magento Cross-Site Request Forgery (CSRF) vulnerability
Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability
Magento vulnerable to denial of service
Magento vulnerable to path traversal
Magento has incorrect authorization issue that leads to arbitrary file system read
Magento Cross-site Scripting vulnerability
Craft CMS has a theoretical bypass for CVE-2025-23209
drupal/ai_seo_link_advisor - SA-CONTRIB-2025-095
Shopware race condition bypasses voucher restrictions
Concrete CMS is vulnerable to Stored XSS from Home Folder on Members Dashboard page
Concrete CMS vulnerable to Reflected Cross-Site Scripting (XSS) in Conversation Messages Dashboard Page
ThinkPHP Path Traversal Vulnerability
FPDI allows Memory Exhaustion (OOM) in PDF Parser which leads to Denial of Service
The ADOdb sqlite3 driver allows SQL injection
Microweber XSS Vulnerability in the homepage Endpoint
Microweber has Reflected XSS Vulnerability in the layout Parameter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.