High
CVE-2025-68619
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,497
Reset filters
Medium
CVE-2025-68273
Signal K Server Vulnerable to Unauthenticated Information Disclosure via Exposed Endpoints
High
CVE-2025-68272
Signal K Server Vulnerable to Denial of Service via Unrestricted Access Request Flooding
Critical
CVE-2025-66398
Signal K Server has Unauthenticated State Pollution leading to Remote Code Execution (RCE)
High
CVE-2025-69256
serverless MCP Server vulnerable to Command Injection in list-projects tool
Medium
CVE-2025-69202
axios-cache-interceptor Vulnerable to Cache Poisoning via Ignored HTTP Vary Header
Medium
CVE-2025-69206
hemmelig allows SSRF Filter bypass via Secret Request functionality
High
CVE-2025-68475
Fedify has ReDoS Vulnerability in HTML Parsing Regex
High
CVE-2025-68278
tinacms is vulnerable to arbitrary code execution
Low
CVE-2025-13321
Mattermost Desktop App exposes sensitive information in its application logs
High
CVE-2025-68154
systeminformation has a Command Injection vulnerability in fsSize() function on Windows
High
CVE-2025-68150
Parse Server is vulnerable to Server-Side Request Forgery (SSRF) via Instagram OAuth Adapter
High
CVE-2025-68155
@vitejs/plugin-rsc has an Arbitrary File Read via `/__vite_rsc_findSourceMapURL` Endpoint
High
CVE-2025-68130
tRPC has possible prototype pollution in `experimental_nextAppDirCaller`
Medium
CVE-2025-68115
Parse Server has a Cross-Site Scripting (XSS) vulnerability via Unescaped Mustache Template Variables
Medium
CVE-2025-68113
ALTCHA Proof-of-Work Vulnerable to Challenge Splicing and Replay
Medium
CVE-2025-66482
Misskey has a login rate limit bypass via spoofed X-Forwarded-For header
High
CVE-2025-66402
misskey.js's export data contains private post data
High
CVE-2025-8083
Vuetify has a Prototype Pollution vulnerability
High
ghsa-5j59-xgg2-r9c4
Next has a Denial of Service with Server Components - Incomplete Fix Follow-Up
Medium
ghsa-c6m7-q6pr-c64r
Vite Plugin React has a Source Code Exposure Vulnerability in React Server Components
High
ghsa-cpqf-f22c-r95x
Vite Plugin React has a Denial of Service Vulnerability in React Server Components
High
CVE-2025-67779
Denial of Service Vulnerability in React Server Components
Medium
ghsa-w37m-7fhw-fmv9
Next Server Actions Source Code Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.