Medium
CVE-2025-53021
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,068
Reset filters
Critical
CVE-2025-49132
Pterodactyl Panel Allows Unauthenticated Arbitrary Remote Code Execution
Low
CVE-2025-49597
handcraftedinthealps/goodby-csv has Potential Gadget Chain allowing Remote Code Execution
Medium
ghsa-9qv6-4pwm-m68f
Ibexa RichText Field Type XSS vulnerabilities in back office
Medium
ghsa-5r6x-g6jv-4v87
Ibexa Admin UI XSS vulnerabilities in back office
Medium
ghsa-vhgq-r8gx-5fpv
Ibexa Admin UI assets XSS vulnerabilities in back office
Medium
ghsa-r5rx-53g9-25rj
Ibexa eZ Platform Admin UI assets XSS vulnerabilities in back office
Medium
ghsa-r7pm-mw8g-p7px
Ibexa eZ Platform Admin UI XSS vulnerabilities in back office
Medium
CVE-2025-49578
starcitizentools/citizen-skin allows stored XSS in user registration date message
Medium
CVE-2025-49579
starcitizentools/citizen-skin allows stored XSS in menu heading message
Medium
CVE-2025-49577
starcitizentools/citizen-skin allows stored XSS in preference menu heading messages
Medium
CVE-2025-49576
starcitizentools/citizen-skin allows stored XSS in search no result messages
Medium
CVE-2025-49575
Citizen skin vulnerable to stored XSS through multiple system messages
High
CVE-2025-48448
drupal/admin_audit_trail - SA-CONTRIB-2025-068
Medium
CVE-2025-48447
drupal/lightgallery - SA-CONTRIB-2025-069
High
CVE-2025-48445
drupal/commerce_eurobank_redirect - SA-CONTRIB-2025-066
Medium
CVE-2025-48444
drupal/quick_node_block - SA-CONTRIB-2025-064
Medium
CVE-2025-48013
drupal/quick_node_block - SA-CONTRIB-2025-065
High
CVE-2025-48446
drupal/commerce_alphabank_redirect - SA-CONTRIB-2025-067
High
CVE-2025-43585
Magento Improper Authorization leading to security feature bypass
Critical
CVE-2025-47110
Magneto contains stored XSS vulnerability
Medium
CVE-2025-27206
Magento Improper Access Control leads to security feature bypass
Medium
CVE-2025-49138
HAX CMS vulnerable to Local File Inclusion via saveOutline API Location Parameter
High
CVE-2025-49137
Hax CMS Stored Cross-Site Scripting vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.