High
CVE-2025-31855
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,638
Medium
CVE-2025-31886
Social proof testimonials and reviews by Repuso <= 5.21 - Missing Authorization
Medium
CVE-2025-31462
CGM Event Calendar <= 0.8.5 - Reflected Cross-Site Scripting
Medium
CVE-2025-31853
Smartarget Popup <= 1.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-31859
Feedbucket – Website Feedback Tool <= 1.0.6 - Cross-Site Request Forgery
Medium
CVE-2025-31550
WP-LESS <= 1.9.6 - Unauthenticated Sensitive Information Disclosure
Medium
CVE-2025-31741
Easy Magazine <= 2.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
ghsa-qq4x-c6h6-rfxh
aws-cdk-lib has Insertion of Sensitive Information into Log File vulnerability when using Cognito UserPoolClient Construct
Medium
CVE-2025-31128
drupal/gifplayer - SA-CONTRIB-2025-032
Medium
CVE-2025-29908
Netty QUIC hash collision DoS attack
Medium
CVE-2025-3016
A vulnerability classified as problematic was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function Assimp::MDLImporter::ParseTextureColorData of the file code/Asset
High
CVE-2025-3015
A vulnerability classified as critical has been found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::ASEImporter::BuildUniqueRepresentation of the file code/AssetLib/ASE/
High
CVE-2025-2891
WP Pro Real Estate 7 <= 3.5.4 - Authenticated (Custom) Arbitrary File Upload
Low
CVE-2025-3001
A vulnerability classified as critical was found in PyTorch 2.6.0. This vulnerability affects the function torch.lstm_cell. The manipulation leads to memory corruption. The attack needs to be approach
Medium
CVE-2024-12189
WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
Exploited in attacks
CVE-2025-31125
Vite has a `server.fs.deny` bypassed for `inline` and `raw` with `?import` query
Medium
CVE-2025-31116
Mobile Security Framework (MobSF) has a SSRF Vulnerability fix bypass on assetlinks_check with DNS Rebinding
Medium
CVE-2025-26042
Uptime Kuma's Regular Expression in pushdeeer and whapi file Leads to ReDoS Vulnerability Due to Catastrophic Backtracking
High
CVE-2025-2008
Import Export Suite for CSV and XML Datafeed <= 7.19 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2025-2999
A vulnerability was found in PyTorch 2.6.0. It has been rated as critical. Affected by this issue is the function torch.nn.utils.rnn.unpack_sequence. The manipulation leads to memory corruption. Attac
Medium
CVE-2025-2998
A vulnerability was found in PyTorch 2.6.0. It has been declared as critical. Affected by this vulnerability is the function torch.nn.utils.rnn.pad_packed_sequence. The manipulation leads to memory co
Low
CVE-2025-3000
PyTorch is vulnerable to memory corruption through its torch.jit.script function
Medium
CVE-2025-2967
ConcreteCMS Cross-Site Scripting (XSS) via HTML Block Text Field
Medium
CVE-2025-2961
Solon Vulnerable to Path Traversal
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.