Medium
CVE-2025-55296
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,406
Reset filters
Unrated
CVE-2025-8996
drupal/layout_builder_perms - SA-CONTRIB-2025-097
High
CVE-2025-52392
Soosyze CMS's /user/login endpoint missing rate-limiting and lockout mechanisms
Medium
CVE-2025-55166
svg-sanitizer Bypasses Attribute Sanitization
High
CVE-2025-49556
Magento has incorrect authorization issue that leads to arbitrary file system read
High
CVE-2025-49557
Magento Cross-site Scripting vulnerability
Unrated
CVE-2025-8675
drupal/ai_seo_link_advisor - SA-CONTRIB-2025-095
Low
CVE-2025-8573
Concrete CMS is vulnerable to Stored XSS from Home Folder on Members Dashboard page
Medium
CVE-2025-54869
FPDI allows Memory Exhaustion (OOM) in PDF Parser which leads to Denial of Service
Critical
CVE-2025-54119
The ADOdb sqlite3 driver allows SQL injection
Low
CVE-2025-45769
php-jwt contains weak encryption
Unrated
CVE-2025-8362
drupal/gtm - SA-CONTRIB-2025-094
Critical
CVE-2025-54418
CodeIgniter4's ImageMagick Handler has Command Injection Vulnerability
High
CVE-2025-54378
HAX CMS API Lacks Authorization Checks
Unrated
CVE-2025-8092
drupal/cookies - SA-CONTRIB-2025-092
Medium
CVE-2025-7899
Powermail extension for TYPO3 allows Insecure Direct Object Reference
Medium
CVE-2025-54139
HAX CMS application pages vulnerable to clickjacking
High
CVE-2025-54138
LibreNMS has Authenticated Remote File Inclusion in ajax_form.php that Allows RCE
High
ghsa-49xw-hw94-fmv2
Dolibarr has Remote Code Execution Vulnerability (Bypass)
Critical
CVE-2025-54082
nova-tiptap has Unauthenticated Arbitrary File Upload Vulnerability
Critical
Exploited in attacks
CVE-2025-54068
Livewire is vulnerable to remote command execution during component property update hydration
Unrated
CVE-2025-7717
drupal/file_download - SA-CONTRIB-2025-089
High
CVE-2025-53625
DynamicPageList3 vulnerability exposes hidden/suppressed usernames
Unrated
CVE-2025-7393
drupal/mail_login - SA-CONTRIB-2025-088
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.