Critical
CVE-2025-48200
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,069
Reset filters
High
CVE-2025-48201
The Backup Plus extension for TYPO3 (ns_backup) has a Predictable Resource Location
Low
CVE-2025-48206
The Backup Plus extension for TYPO3 (ns_backup) allows XSS
Medium
CVE-2025-48204
The Backup Plus extension for TYPO3 (ns_backup) allows command injections
High
CVE-2025-48205
The Front End User Registration extension for TYPO3 (sr_feuser_register) allows Insecure Direct Object Reference
Medium
CVE-2025-48207
reint_downloadmanager TYPO3 Extension is susceptible to Insecure Direct Object Reference
Medium
CVE-2025-48202
The femanager TYPO3 extension allows Insecure Direct Object Reference
Medium
CVE-2025-48203
[clickstorm] SEO (cs_seo) TYPO3 extension Cross-site Scripting (XSS) vulnerability
High
CVE-2025-47941
The TYPO3 CMS Backend has Broken Authentication in Backend MFA
High
CVE-2025-47940
TYPO3 Allows Privilege Escalation to System Maintainer
Medium
CVE-2025-47939
TYPO3 Allows Unrestricted File Upload in File Abstraction Layer
Low
CVE-2025-47938
TYPO3 Unverified Password Change for Backend Users
Low
CVE-2025-47937
TYPO3 Allows Information Disclosure via DBAL Restriction Handling
Low
CVE-2025-47936
TYPO3 CMS Webhooks Server Side Request Forgery
Medium
CVE-2025-47946
Symfony UX allows unsanitized HTML attribute injection via ComponentAttributes
Low
CVE-2025-47931
LibreNMS stored Cross-site Scripting vulnerability in poller group name
Critical
ghsa-9fwj-9mjf-rhj3
laravel-auth0 SDK Vulnerable to Brute Force Authentication Tags of CookieStore Sessions
Critical
ghsa-2f4r-34m4-3w8q
Auth0 Wordpress plugin Vulnerable to Brute Force Authentication Tags of CookieStore Sessions
Critical
ghsa-9wg9-93h9-j8ch
Auth0 Symfony SDK Vulnerable to Brute Force Authentication Tags of CookieStore Sessions
Critical
CVE-2025-47275
Brute Force Authentication Tags of CookieStore Sessions in Auth0-PHP SDK
Medium
CVE-2025-47778
Sulu vulnerable to XXE in SVG File upload Inspector
Unrated
CVE-2025-48012
drupal/one_time_password - SA-CONTRIB-2025-063
Unrated
CVE-2025-48011
drupal/one_time_password - SA-CONTRIB-2025-062
Unrated
CVE-2025-48010
drupal/one_time_password - SA-CONTRIB-2025-061
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.