High
CVE-2025-47889
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,741
Medium
CVE-2025-47887
Jenkins Cadence vManager Plugin is Missing Permission Checks
Medium
CVE-2025-47886
Jenkins Cadence vManager Plugin Vulnerable to Cross-Site Request Forgery
Critical
CVE-2025-47884
Jenkins OpenID Connect Provider Plugin Incorrectly Validates Crafted Build ID Tokens
High
CVE-2025-47885
Jenkins Health Advisor by CloudBees Plugin Vulnerable to Cross-Site Scripting
Medium
CVE-2025-47888
Jenkins DingTalk Plugin Unconditionally Disables SSL/TLS Certificate and Hostname Validation
Critical
CVE-2025-4641
BoniGarcia WebDriverManager Affected By Improper Restriction of XML External Entity Reference
Unrated
CVE-2025-48012
drupal/one_time_password - SA-CONTRIB-2025-063
Unrated
CVE-2025-48011
drupal/one_time_password - SA-CONTRIB-2025-062
Unrated
CVE-2025-48010
drupal/one_time_password - SA-CONTRIB-2025-061
Unrated
CVE-2025-48009
drupal/single_content_sync - SA-CONTRIB-2025-060
Unrated
CVE-2025-4416
drupal/events_log_track - SA-CONTRIB-2025-059
Unrated
CVE-2025-4415
drupal/piwik_pro - SA-CONTRIB-2025-058
Unrated
drupal-contrib-2025-057
drupal/advanced_file_destination - SA-CONTRIB-2025-057
High
CVE-2025-47782
motionEye vulnerable to RCE in add_camera Function Due to unsafe command execution
Medium
CVE-2025-4591
Weluka Lite <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-4126
EG-Series <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2025-4589
Bon Toolkit <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2025-3917
百度站长SEO合集(支持百度/神马/Bing/头条推送) <= 2.0.6 - Unauthenticated Arbitrary File Upload
High
CVE-2025-4579
WP Content Security Plugin <= 2.3 - Unauthenticated Stored Cross-Site Scripting via CSP-Report Fields
Medium
CVE-2025-26795
Apache IoTDB JDBC Driver Discloses Sensitive Information via Log Files
Critical
CVE-2024-24780
Remote Code Execution with untrusted URI of UDF vulnerability in Apache IoTDB. The attacker who has privilege to create UDF can register malicious function from untrusted URI.
Medium
CVE-2025-26864
Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Information into Log File vulnerability in the OpenIdAuthorizer of Apache IoTDB.
High
CVE-2025-4578
File Provider <= 1.2.3 - Unauthenticated SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.