Średnia
CVE-2025-27526
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 757
Wysoka
CVE-2025-27522
Apache InLong: JDBC Vulnerability during verification processing
Średnia
CVE-2025-4955
tarteaucitron.io <= 1.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Średnia
CVE-2025-54005
SKT Page Builder <= 4.9 - Missing Authorization
Średnia
CVE-2025-4963
WP Extended <= 3.0.15 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Średnia
CVE-2025-48490
Laravel Rest Api has a Search Validation Bypass
Średnia
CVE-2025-5082
WP Attachments <= 5.0.12 - Reflected Cross-Site Scripting via attachment_id Parameter
Niska
CVE-2025-48382
Fess has Insecure Temporary File Permissions
Niska
CVE-2025-48370
auth-js Vulnerable to Insecure Path Routing from Malformed User Input
Średnia
CVE-2024-52588
Strapi allows Server-Side Request Forgery in Webhook function
Wysoka
CVE-2025-4800
MasterStudy LMS Pro <= 4.7.0 - Authenticated (Subscriber+) Arbitrary File Upload
Średnia
CVE-2025-48054
radashi Allows Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
Średnia
CVE-2025-3704
Volunteer Sign Up Sheets <= 5.5.4 - Authenticated (Admin+) Stored Cross-site Scripting
Wysoka
CVE-2025-5287
Likes and Dislikes Plugin <= 1.0.0 - Unauthenticated SQL Injection
Średnia
CVE-2025-62881
WP-Lister Lite for eBay <= 3.8.3 - Missing Authorization
Średnia
CVE-2025-5209
Ivory Search – WordPress Search Plugin <= 5.5.9 - Authenticated (Admin+) Stored Cross-Site Scripting
Wysoka
CVE-2025-5117
Property 1.0.5 - 1.0.6 - Missing Authorization to Authenticated (Author+) Privilege Escalation via property_package_user_role Metadata in PayPal Registration
Średnia
CVE-2025-4682
Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slider and Post Carousel Widgets
Średnia
CVE-2025-4683
MStore API – Create Native Android & iOS Apps On The Cloud <= 4.17.5 - Missing Authorization to Authenticated (Subscriber+) Posts Creation
Średnia
CVE-2025-4783
Exclusive Addons for Elementor <= 2.7.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Timer Widget
Średnia
CVE-2025-5175
A vulnerability was found in erdogant pypickle up to 1.1.5. It has been classified as critical. This affects the function Save of the file pypickle/pypickle.py. The manipulation leads to improper auth
Wysoka
CVE-2025-5174
A vulnerability was found in erdogant pypickle up to 1.1.5 and classified as problematic. Affected by this issue is the function load of the file pypickle/pypickle.py. The manipulation leads to deseri
Średnia
CVE-2025-5169
A vulnerability classified as problematic has been found in Open Asset Import Library Assimp 5.4.3. This affects the function MDLImporter::InternReadFile_3DGS_MDL345 of the file assimp/code/AssetLib/M
Średnia
CVE-2025-5168
A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been rated as problematic. Affected by this issue is the function MDLImporter::ImportUVCoordinate_3DGS_MDL345 of the file as
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.