High
CVE-2025-46349
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,407
Reset filters
Low
CVE-2025-46350
Yeswiki Vulnerable to Authenticated Reflected Cross-site Scripting
Medium
CVE-2025-46550
Yeswiki Vulnerable to Unauthenticated Reflected Cross-site Scripting
Medium
CVE-2025-46549
Yeswiki Vulnerable to Unauthenticated Reflected Cross-site Scripting
Medium
CVE-2025-3645
Moodle has an IDOR in messaging web service which allows access to some user details
Medium
CVE-2025-3640
Moodle has an IDOR in web service which allows users enrolled in a course to access some details of other users
High
CVE-2025-3642
Moodle has an authenticated remote code execution risk in the Moodle LMS EQUELLA repository
High
CVE-2025-3641
Moodle has an authenticated remote code execution risk in the Moodle LMS Dropbox repository
Low
CVE-2025-3635
Moodle has a CSRF risk in user tours manager that allows tour duplication
Medium
CVE-2025-3627
Moodle makes some user data available before completing second factor with MFA enabled
Medium
CVE-2025-32045
Moodle shows hidden grades to users without permission on some grade reports
High
CVE-2025-32044
Moodle allows unauthenticated REST API user data exposure
Medium
CVE-2025-3634
Moodle self enrollment available before completing second factor with MFA enabled
Critical
Exploited in attacks
CVE-2025-32432
Craft CMS Allows Remote Code Execution
Unrated
CVE-2025-3907
drupal/search_api_solr - SA-CONTRIB-2025-046
Unrated
CVE-2025-3903
drupal/ueditor - SA-CONTRIB-2025-044
Unrated
CVE-2025-3900
drupal/colorbox - SA-CONTRIB-2025-041
Unrated
CVE-2025-3739
drupal/d8_google_optimize_hide_page - SA-CONTRIB-2025-040
Unrated
CVE-2025-3738
drupal/google_optimize - SA-CONTRIB-2025-039
Unrated
CVE-2025-3737
drupal/gmap_store_locator - SA-CONTRIB-2025-038
Unrated
CVE-2025-3736
drupal/simple_gtm - SA-CONTRIB-2025-037
Unrated
CVE-2025-3735
drupal/panelizer - SA-CONTRIB-2025-036
Unrated
CVE-2025-3734
drupal/stage_file_proxy - SA-CONTRIB-2025-035
Medium
CVE-2025-32426
Formie has XSS vulnerability for email notification content for preview
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.