Medium
CVE-2025-51586
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,406
Reset filters
Medium
CVE-2025-9824
Mautic Vulnerable to User Enumeration via Response Timing
Medium
CVE-2025-9823
Mautic vulnerable to reflected XSS in lead:addLeadTags - Quick Add
Medium
CVE-2025-9822
Mautic vulnerable to secret data extraction via elfinder
Low
CVE-2025-9821
Mautic vulnerable to SSRF via webhook function
High
CVE-2025-71417
PocketMine-MP `ResourcePackDataInfoPacket` amplification vulnerability due to lack of resource pack sequence status checking
Medium
CVE-2025-57759
Contao does not properly manage privileges for page and article fields
Medium
CVE-2025-57757
Contao can disclose sensitive information in the news module
Medium
CVE-2025-57756
Contao discloses sensitive information in the front end search index
Unrated
CVE-2025-9554
drupal/owlcarousel2 - SA-CONTRIB-2025-104
Unrated
CVE-2025-9553
drupal/api_key_manager - SA-CONTRIB-2025-103
Unrated
CVE-2025-9552
drupal/sync_composer_with_contrib - SA-CONTRIB-2025-102
Unrated
CVE-2025-9550
drupal/facets - SA-CONTRIB-2025-100
Critical
CVE-2025-52122
The Freeform CraftCMS plugin contains an Server-side template injection (SSTI) vulnerability
High
CVE-2025-52353
Badaso CMS file upload vulnerability
Medium
CVE-2025-50383
Easy!Appointments SQL injection vulnerability
Medium
CVE-2025-57811
Craft CMS Potential Remote Code Execution via Twig SSTI
High
CVE-2025-54370
PhpSpreadsheet vulnerable to SSRF when reading and displaying a processed HTML document in the browser
Low
CVE-2025-55745
UnoPim has CSV Injection on Quick Export feature
High
CVE-2025-55741
UnoPim has Broken Access Control
Medium
CVE-2025-55744
UnoPim vulnerable to CSRF on Product edit feature and creation of other types
High
CVE-2025-55743
UnoPim vulnerable to remote code execution through Arbitrary File upload
Medium
CVE-2025-55742
UnoPim has Stored Cross-site Scripting vulnerability in user creation functionality
Medium
CVE-2025-51510
MoonShine SQL Injection Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.