High
CVE-2025-43864
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,493
Reset filters
High
CVE-2025-43855
tRPC 11 WebSocket DoS Vulnerability
High
CVE-2025-1520
PostHog Plugin Server SQL Injection Vulnerability
Medium
CVE-2025-32388
@sveltejs/kit vulnerable to Cross-site Scripting via tracked search_params
Medium
CVE-2025-32395
Vite has an `server.fs.deny` bypass with an invalid `request-target`
Medium
CVE-2025-71332
FlowiseDB vulnerable to SQL Injection by authenticated users
Medium
CVE-2025-31486
Vite allows server.fs.deny to be bypassed with .svg or relative paths
Critical
CVE-2025-31477
Improper Scope Validation in the `open` Endpoint of `tauri-plugin-shell`
Medium
Exploited in attacks
CVE-2025-31125
Vite has a `server.fs.deny` bypassed for `inline` and `raw` with `?import` query
Medium
CVE-2025-26042
Uptime Kuma's Regular Expression in pushdeeer and whapi file Leads to ReDoS Vulnerability Due to Catastrophic Backtracking
High
CVE-2025-30353
Directus's webhook trigger flows can leak sensitive data
Medium
CVE-2025-30350
Directus's S3 assets become unavailable after a burst of HEAD requests
Medium
CVE-2025-30225
Directus's S3 assets become unavailable after a burst of malformed transformations
Medium
CVE-2025-30208
Vite bypasses server.fs.deny when using ?raw??
High
CVE-2025-2691
nossrf Server-Side Request Forgery (SSRF)
Medium
CVE-2025-30168
Parse Server has an OAuth login vulnerability
High
ghsa-5ccf-884p-4jjq
Open WebUI Unauthenticated Multipart Boundary Denial of Service (DoS) Vulnerability
High
CVE-2024-12534
Open WebUI Uncontrolled Resource Consumption vulnerability
High
CVE-2024-12537
Open WebUI Uncontrolled Resource Consumption vulnerability
High
CVE-2025-27415
Nuxt allows DOS via cache poisoning with payload rendering response
Medium
CVE-2025-30144
Fast-JWT Improperly Validates iss Claims
Critical
CVE-2025-71338
Flowise allows arbitrary file write to RCE
Critical
CVE-2025-71333
Flowise Pre-auth Arbitrary File Upload
High
CVE-2025-59049
Mockoon has a Path Traversal and LFI in the static file serving endpoint
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.