Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 524
Reset filtersUmbraco CMS contains a server-side request forgery vulnerability
UmbracoForms Vulnerable to Remote Code Execution via Untrusted WSDL Compilation in Dynamic SOAP Client Generation
AWS SDK for .NET V4 adopted defense in depth enhancement for region parameter value
ImageMagick's failure to limit MVG mutual causes Stack Overflow
ImageMagick's failure to limit the depth of SVG file reads caused a DoS attack
Amazon S3 Encryption Client for .NET has a Key Commitment Issue
ABP Account Module has an Open Redirect through Improper validation in its register function
ImageMagick is vulnerable to an integer Overflow in TIM decoder leading to out of bounds read (32-bit only)
Umbraco Vulnerable to Improper File Access and Credential Exposure in Dictionary Import Functionality
DNN vulnerable to stored cross-site-scripting (XSS) via SVG upload
DNN CKEditor Provider allows unauthenticated upload out-of-the-box
ImageMagick has Integer Overflow in BMP Decoder (ReadBMP)
ImageMagick CLAHE : Unsigned underflow and division-by-zero lead to OOB pointer arithmetic and process crash (DoS)
Mammoth is vulnerable to Directory Traversal
Apache ActiveMQ NMS AMQP Client has a Deserialization of Untrusted Data vulnerability
Microsoft Security Advisory CVE-2025-55248: .NET Information Disclosure Vulnerability
Microsoft Security Advisory CVE-2025-55247 | .NET Denial of Service Vulnerability
Microsoft Security Advisory CVE-2025-55315: .NET Security Feature Bypass Vulnerability
Amazon.IonDotnet is vulnerable to Denial of Service attacks
Akka.Remote TLS did not properly implement certificate-based authentication
FormCMS has an improper access control vulnerability in the /api/schemas/history/[schemaId] endpoint
DNN vulnerable to Reflected Cross-Site Scripting (XSS) using url to profile
DNN Vulnerable to Stored Cross-Site Scripting (XSS) in the Prompt module
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.