Medium
CVE-2025-48337
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,686
Low
CVE-2025-48068
Information exposure in Next.js dev server due to lack of origin verification
Medium
ghsa-94v7-wxj6-r2q5
multicast in source builds from vulnerable setuptools dependency
Medium
CVE-2025-5286
Bold Builder <= 5.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via additional_settings Parameter
Medium
CVE-2025-4670
Easy Digital Downloads <= 3.3.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via edd_receipt Shortcode
Medium
CVE-2025-5122
Map Block Leaflet <= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter
Medium
CVE-2025-71379
vLLM vulnerable to Regular Expression Denial of Service
Unrated
CVE-2025-48915
drupal/cookies - SA-CONTRIB-2025-076
Unrated
CVE-2025-48914
drupal/cookies - SA-CONTRIB-2025-075
Unrated
CVE-2025-48920
drupal/etracker - SA-CONTRIB-2025-074
Unrated
CVE-2025-48919
drupal/simple_klaro - SA-CONTRIB-2025-073
Unrated
CVE-2025-48917
drupal/eu_cookie_compliance - SA-CONTRIB-2025-072
Unrated
CVE-2025-48918
drupal/simple_klaro - SA-CONTRIB-2025-071
Unrated
CVE-2025-48916
drupal/bookable_calendar - SA-CONTRIB-2025-070
Medium
CVE-2025-5256
Mautic has an Open Redirect vulnerability on user unlock path.
Medium
CVE-2024-47055
Mautic segment cloning doesn't have a proper permission check
Medium
CVE-2024-47057
Mautic allows user name enumeration due to response time difference on password reset form
Medium
CVE-2024-47056
Mautic does not shield .env files from web traffic
Medium
CVE-2025-5257
Mautic's Predictable Page Indexing Might Lead to Sensitive Data Exposure
Medium
CVE-2025-4583
Smash Balloon Instagram Feed <= 6.9.0 (Free) & <= 6.8.0 (Pro) - Authenticated (Contributor+) Stored Cross-Site Scripting via `data-plugin` Attribute
Medium
CVE-2025-48883
Chrome PHP is missing encoding in `CssSelector`
High
CVE-2025-48734
Apache Commons Improper Access Control vulnerability
High
CVE-2025-48881
Valtimo backend libraries allows objects in the object-api to be accessed and modified by unauthorized users
High
CVE-2025-1753
LLama-Index CLI OS command injection vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.