High
CVE-2025-57803
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 66
Reset filters
High
CVE-2025-55298
ImageMagick has a Format String Bug in InterpretImageFilename leads to arbitrary code execution
Medium
CVE-2025-48377
Reflected Cross-Site Scripting (XSS) in module actions in edit mode
Medium
CVE-2024-55341
Piranha CMS Cross-site Scripting vulnerability
Medium
CVE-2024-29881
TinyMCE Cross-Site Scripting (XSS) vulnerability in handling external SVG files through Object or Embed elements
Low
CVE-2023-49089
Using the directory back payload (“/../”) in a package name allows placement of package in other folders.
Medium
CVE-2023-45818
TinyMCE mXSS vulnerability in undo/redo, getContent API, resetContent API, and Autosave plugin
High
CVE-2023-34230
Snowflake Connector .Net Command Injection
Medium
CVE-2023-31285
Cross Site Scripting (XSS) in Serenity
High
CVE-2023-30626
Directory traversal + file write causing arbitrary code execution
High
CVE-2022-38013
.NET Denial of Service Vulnerability
Medium
CVE-2022-29362
Cross-site Scripting in ZKEACMS
High
CVE-2022-21167
Code Injection in Masuit.Tools.Core
High
CVE-2020-1469
Infinite loop in .Net Bond
Critical
CVE-2022-0749
Deserialization of Untrusted Data in SinGooCMS.Utility
Medium
ghsa-qrmm-w75w-3wpx
Server side request forgery in SwaggerUI
Critical
Exploited in attacks
CVE-2021-23758
Remote Code Execution in AjaxNetProfessional
Critical
CVE-2021-29508
Insecure deserialization in Wire
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.