Critical
CVE-2025-68901
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2025-67619
Kids Heaven <= 3.2 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2025-68986
Miion <= 1.2.7 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2025-68906
JNews - Video <= 11.0.2 - Reflected Cross-Site Scripting
High
CVE-2025-68909
Blogistic <= 1.0.5 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2025-68902
Anona <= 8.0 - Unauthenticated Arbitrary File Download
Medium
CVE-2025-67620
Anon <= 2.2.10 - Reflected Cross-Site Scripting
High
CVE-2026-24608
Laurent Core <= 2.4.1 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2026-24360
Seriously Simple Podcasting <= 3.14.1 - Authenticated (Editor+) Server-Side Request Forgery
Medium
CVE-2025-68911
Solace <= 2.1.16 - Missing Authorization
Medium
CVE-2026-22329
Skillate <= 1.2.10 - Reflected Cross-Site Scripting
Medium
CVE-2026-22328
Auto Repair <= 22.6 - Reflected Cross-Site Scripting
High
CVE-2026-22327
Restaurt <= 1.0.4 - Authenticated (subscriber+) Arbitrary File Upload
Medium
CVE-2025-69001
FluentForm <= 6.1.11 - Unauthenticated Arbitrary Shortcode Execution
High
CVE-2025-69002
OneLife <= 3.9 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2025-69364
Breeze <= 2.2.21 - Missing Authorization
Medium
CVE-2025-67618
Brookside <= 1.4 - Reflected Cross-Site Scripting
High
CVE-2024-58339
LlamaIndex (run-llama/llama_index) versions up to and including 0.12.2 contain an uncontrolled resource consumption vulnerability in the VannaPack VannaQueryEngine implementation. The custom_query() l
High
CVE-2024-14021
LlamaIndex (run-llama/llama_index) versions up to and including 0.11.6 contain an unsafe deserialization vulnerability in BGEM3Index.load_from_disk() in llama_index/indices/managed/bge_m3/base.py. The
High
CVE-2024-58340
LangChain versions up to and including 0.3.1 contain a regular expression denial-of-service (ReDoS) vulnerability in the MRKLOutputParser.parse() method (libs/langchain/langchain/agents/mrkl/output_pa
High
CVE-2025-68472
MindsDB has improper sanitation of filepath that leads to information disclosure and DOS
Medium
CVE-2026-24612
Orchid Store <= 1.5.15 - Missing Authorization
Medium
CVE-2026-24614
Flex QR Code Generator <= 1.2.11 - Authenticated (Author+) Stored Cross-Site Scripting
High
CVE-2025-69005
Search & Go <= 2.8 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.