Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,068
Reset filtersdrupal/mail_login - SA-CONTRIB-2025-088
drupal/cookies_addons - SA-CONTRIB-2025-087
Cockpit - Content Platform vulnerable to XSS through name or email argument names
Citizen Short Description stored XSS vulnerability through wikitext
Bolt CMS vulnerable to authenticated remote code execution
Citizen vulnerable to Stored XSS through short descriptions
starcitizentools/citizen-skin is vulnerable to Stored XSS attack in the legacy search bar through page descriptions
Microweber CMS API has authenticated local file inclusion vulnerability
drupal/config_pages_viewer - SA-CONTRIB-2025-086
drupal/tfa - SA-CONTRIB-2025-085
TabberNeue vulnerable to Stored XSS through wikitext
raspap-webgui has a Directory Traversal vulnerability
JuzaWeb CMS is vulnerable to Incorrect Privilege Assignment when installing certain components
JuzaWeb CMS is vulnerable to Incorrect Privilege Assignment when installing Import Page component
Magento Authenticated Security feature bypass
Magento Security feature bypass
drupal/paragraphs_table - SA-CONTRIB-2025-084
drupal/simple_sitemap - SA-CONTRIB-2025-083
drupal/miniorange_2fa - SA-CONTRIB-2025-082
drupal/ckeditor5_youtube - SA-CONTRIB-2025-081
drupal/klaro - SA-CONTRIB-2025-080
drupal/glightbox - SA-CONTRIB-2025-078
drupal/toc_js - SA-CONTRIB-2025-077
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.