High
CVE-2025-58449
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,221
Reset filters
Medium
CVE-2025-9823
Mautic vulnerable to reflected XSS in lead:addLeadTags - Quick Add
Low
CVE-2025-9821
Mautic vulnerable to SSRF via webhook function
High
CVE-2025-71417
PocketMine-MP `ResourcePackDataInfoPacket` amplification vulnerability due to lack of resource pack sequence status checking
Critical
CVE-2025-52122
The Freeform CraftCMS plugin contains an Server-side template injection (SSTI) vulnerability
High
CVE-2025-52353
Badaso CMS file upload vulnerability
High
CVE-2025-43960
Adminer PHP Object Injection issue leads to Denial of Service
High
CVE-2025-54370
PhpSpreadsheet vulnerable to SSRF when reading and displaying a processed HTML document in the browser
Low
CVE-2025-55745
UnoPim has CSV Injection on Quick Export feature
High
CVE-2025-55743
UnoPim vulnerable to remote code execution through Arbitrary File upload
Medium
CVE-2025-8678
WP Crontrol - 1.17.0 - 1.19.1 - Authenticated (Administrator+) Blind Server-Side Request Forgery
Unrated
CVE-2025-8675
drupal/ai_seo_link_advisor - SA-CONTRIB-2025-095
Medium
CVE-2025-54869
FPDI allows Memory Exhaustion (OOM) in PDF Parser which leads to Denial of Service
Medium
CVE-2025-7899
Powermail extension for TYPO3 allows Insecure Direct Object Reference
Medium
CVE-2025-54139
HAX CMS application pages vulnerable to clickjacking
High
ghsa-49xw-hw94-fmv2
Dolibarr has Remote Code Execution Vulnerability (Bypass)
Critical
CVE-2025-53833
LaRecipe is vulnerable to Server-Side Template Injection attacks
Medium
CVE-2025-34076
Microweber CMS API has authenticated local file inclusion vulnerability
High
CVE-2025-44163
raspap-webgui has a Directory Traversal vulnerability
Critical
CVE-2025-49132
Pterodactyl Panel Allows Unauthenticated Arbitrary Remote Code Execution
Medium
CVE-2025-49138
HAX CMS vulnerable to Local File Inclusion via saveOutline API Location Parameter
High
CVE-2025-49137
Hax CMS Stored Cross-Site Scripting vulnerability
High
CVE-2025-48882
PHPOffice Math allows XXE when processing an XML file in the MathML format
Medium
CVE-2024-47056
Mautic does not shield .env files from web traffic
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.