Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 360
Reset filtersMagento 2 Community Edition IDOR Vulnerability
Magento 2 Community Edition Cryptographic Flaw
Magento 2 Community Edition XSS Vulnerability
Magento 2 Community Edition XSS Vulnerability
Magento Cross-Site Request Forgery (CSRF)
Magento 2 Community Edition Path Traversal Vulnerability
Magento 2 Community Edition Weak PRNG
Magento 2 Community Edition Unsafe File Upload
Magento 2 Community Edition XSS Vulnerability
Magento 2 Community Edition XSS Vulnerability
Magento 2 Community Edition Path Disclosure
Magento 2 Community Cryptographic Flaw
Magento 2 Community Edition CSRF vulnerability
Magento 2 Community Edition Session Fixation Check
Magento Cross-Site Request Forgery (CSRF)
Magento improper input validation vulnerability
Unauthenticated crypto and weak IV in Magento\Framework\Encryption
Composer JavaScript injection possible via html comments
Magento Cross-Site Scripting via Attribute Set Name
Bypass of sitemp access restrictions
Remote code execution via vulnerable Symphony dependecy injection
Using JS libraries with known security vulnerabilities
Information disclosure through processing of external XML entities
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.