High
CVE-2025-69214
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 388
Reset filters
High
CVE-2025-69213
OpenSTAManager has a SQL Injection in ajax_complete.php (get_sedi endpoint)
High
CVE-2026-25514
FacturaScripts has SQL Injection in Autocomplete Actions
High
CVE-2026-25513
FacturaScripts has SQL Injection in API ORDER BY Clause
High
CVE-2026-22243
EGroupware has SQL Injection in Nextmatch Filter Processing
High
CVE-2026-23498
Shopware Has Improper Control of Generation of Code in Twig rendered views
High
CVE-2025-68456
Unauthenticated Craft CMS users can trigger a database backup
High
CVE-2025-66298
Grav is vulnerable to Server-Side Template Injection (SSTI) via Forms
High
CVE-2025-66294
Grav is vulnerable to RCE via SSTI through Twig Sandbox Bypass
Medium
CVE-2025-66307
Grav Admin Plugin vulnerable to User Enumeration & Email Disclosure
High
CVE-2025-66299
Grav is Vulnerable to Security Sandbox Bypass with SSTI (Server Side Template Injection)
Medium
CVE-2025-66026
REDAXO CMS is vulnerable to Reflected XSS in Mediapool Info Banner via args[types]
High
CVE-2025-62519
phpMyFAQ has Authenticated SQL Injection in Configuration Update Functionality
Medium
CVE-2025-64714
PrivateBin's template-switching feature allows arbitrary local file inclusion through path traversal
Medium
CVE-2025-62796
PrivateBin is missing HTML sanitization of attached filename in file size hint
High
CVE-2025-62617
Admidio Vulnerable to Authenticated SQL Injection in Member Assignment Functionality
Low
CVE-2025-61924
PrestaShop Checkout Target PayPal merchant account hijacking from backoffice
High
CVE-2025-71417
PocketMine-MP `ResourcePackDataInfoPacket` amplification vulnerability due to lack of resource pack sequence status checking
Low
CVE-2025-47936
TYPO3 CMS Webhooks Server Side Request Forgery
Critical
Exploited in attacks
CVE-2024-58136
yiisoft/yii2 Mishandles the Attaching of Behavior Defined by a `__class` Array Key
Medium
CVE-2025-29788
Sylius PayPal Plugin Payment Amount Manipulation Vulnerability
Medium
CVE-2025-27515
Laravel has a File Validation Bypass
Critical
ghsa-c2p2-hgjg-9r3f
Crayfish Allows Remote Code Execution via hypercube X-Islandora-Args Header
High
CVE-2025-24017
Unauthenticated DOM Based XSS in YesWiki
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.