Medium
CVE-2025-26566
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,610
Medium
CVE-2024-13430
Page Builder: Pagelayer – Drag and Drop website builder <= 1.9.8 - Authenticated (Contributor+) Private Post Disclosure in pagelayer_builder_posts_shortcode
Medium
CVE-2025-28905
Featured Posts Grid <= 1.7 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2025-1986
Gutentor <= 3.4.6 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-28902
Contact Form 7 Select Box Editor Button <= 0.6 - Cross-Site Request Forgery
Medium
CVE-2025-28881
Mobile Themes <= 1.1.1 - Cross-Site Request Forgery
Medium
CVE-2025-28862
Comment Date and Gravatar remover <= 1.0 - Cross-Site Request Forgery
Medium
CVE-2025-28933
MaxA/B <= 2.2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-0660
Concrete CMS affected by a stored XSS in Folder Function.The "Add Folder" functionality
Medium
CVE-2025-1391
Improper Authorization in Keycloak Organization Mapper Allows Unauthorized Organization Claims
Medium
CVE-2025-0604
Authentication Bypass Due to Missing LDAP Bind After Password Reset in Keycloak
Medium
CVE-2025-71418
PocketMine-MP allows malicious client data to waste server resources due to lack of limits for explode()
Critical
Exploited in attacks
CVE-2025-24813
Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT
High
CVE-2025-25977
canvg Prototype Pollution vulnerability
Medium
ghsa-47qw-ccjm-9c2c
LocalS3 XML Parser Vulnerable to XML External Entity (XXE) Injection
Medium
ghsa-v232-254c-m6p7
LocalS3 Project Vulnerable to XML External Entity (XXE) Injection via Bucket Tagging API
Medium
ghsa-2466-4485-4pxj
LocalS3 Project Bucket Operations Vulnerable to XML External Entity (XXE) Injection
Medium
CVE-2025-27136
LocalS3 CreateBucketConfiguration Endpoint XML External Entity (XXE) Injection
Medium
CVE-2024-13413
ProductDyno <= 1.0.24 - Reflected Cross-Site Scripting via 'res' Parameter
Low
CVE-2025-2149
A vulnerability was found in PyTorch 2.6.0+cu124. It has been rated as problematic. Affected by this issue is the function nnq_Sigmoid of the component Quantized Sigmoid Module. The manipulation of th
Critical
CVE-2025-1497
A vulnerability, that could result in Remote Code Execution (RCE), has been found in PlotAI. Lack of validation of LLM-generated output allows attacker to execute arbitrary Python code.
Critical
CVE-2025-1661
HUSKY – Products Filter Professional for WooCommerce <= 1.3.6.5 - Unauthenticated Local File Inclusion
Critical
CVE-2025-2152
A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. This issue affects the function Assimp::BaseImporter::ConvertToUTF8 of the file BaseImporte
High
CVE-2025-2151
A vulnerability classified as critical was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function Assimp::GetNextLine in the library ParsingUtils.h of the component F
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.