Medium
CVE-2025-49130
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,068
Reset filters
Critical
ghsa-c42h-56wx-h85q
laravel-auth0 SDK Deserialization of Untrusted Data vulnerability
Critical
ghsa-98j6-67v3-mw34
Auth0 Symfony SDK Deserialization of Untrusted Data vulnerability
Medium
CVE-2025-48493
Yii 2 Redis may expose AUTH parameters in logs in case of connection failure
Critical
ghsa-862m-5253-832r
Auth0 Wordpress Plugin vulnerable to Deserialization of Untrusted Data
Critical
CVE-2025-48951
Auth0-PHP SDK Deserialization of Untrusted Data vulnerability
Critical
Exploited in attacks
CVE-2025-49113
Roundcube Webmail Vulnerable to Authenticated RCE via PHP Object Deserialization
Medium
CVE-2025-5420
juzaweb CMS allows cross-site scripting by uploading an SVG file
High
CVE-2025-48882
PHPOffice Math allows XXE when processing an XML file in the MathML format
Unrated
CVE-2025-48915
drupal/cookies - SA-CONTRIB-2025-076
Unrated
CVE-2025-48914
drupal/cookies - SA-CONTRIB-2025-075
Unrated
CVE-2025-48920
drupal/etracker - SA-CONTRIB-2025-074
Unrated
CVE-2025-48919
drupal/simple_klaro - SA-CONTRIB-2025-073
Unrated
CVE-2025-48917
drupal/eu_cookie_compliance - SA-CONTRIB-2025-072
Unrated
CVE-2025-48918
drupal/simple_klaro - SA-CONTRIB-2025-071
Unrated
CVE-2025-48916
drupal/bookable_calendar - SA-CONTRIB-2025-070
Medium
CVE-2025-5256
Mautic has an Open Redirect vulnerability on user unlock path.
Medium
CVE-2024-47055
Mautic segment cloning doesn't have a proper permission check
Medium
CVE-2024-47057
Mautic allows user name enumeration due to response time difference on password reset form
Medium
CVE-2024-47056
Mautic does not shield .env files from web traffic
Medium
CVE-2025-5257
Mautic's Predictable Page Indexing Might Lead to Sensitive Data Exposure
Medium
CVE-2025-48883
Chrome PHP is missing encoding in `CssSelector`
Medium
CVE-2025-48490
Laravel Rest Api has a Search Validation Bypass
Critical
CVE-2025-48200
The Front End User Registration extension for TYPO3 (sr_feuser_register) Remote Code Execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.