Medium
Exploited in attacks
CVE-2025-31125
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2025-31116
Mobile Security Framework (MobSF) has a SSRF Vulnerability fix bypass on assetlinks_check with DNS Rebinding
Medium
CVE-2025-26042
Uptime Kuma's Regular Expression in pushdeeer and whapi file Leads to ReDoS Vulnerability Due to Catastrophic Backtracking
High
CVE-2025-2008
Import Export Suite for CSV and XML Datafeed <= 7.19 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2025-2999
A vulnerability was found in PyTorch 2.6.0. It has been rated as critical. Affected by this issue is the function torch.nn.utils.rnn.unpack_sequence. The manipulation leads to memory corruption. Attac
Medium
CVE-2025-2998
A vulnerability was found in PyTorch 2.6.0. It has been declared as critical. Affected by this vulnerability is the function torch.nn.utils.rnn.pad_packed_sequence. The manipulation leads to memory co
Low
CVE-2025-3000
PyTorch is vulnerable to memory corruption through its torch.jit.script function
Medium
CVE-2025-2967
ConcreteCMS Cross-Site Scripting (XSS) via HTML Block Text Field
Medium
CVE-2025-2961
Solon Vulnerable to Path Traversal
Medium
CVE-2025-31617
PostmarkApp Email Integrator <= 2.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-31597
Ultimate Live Cricket WordPress Lite <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2025-2237
WP RealEstate <= 1.6.26 - Unauthenticated Privilege Escalation via 'process_register'
Medium
CVE-2025-31616
Varnish WordPress <= 1.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-31542
My auctions allegro <= 3.6.20 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-31592
Send E-mail <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31601
Appointy Appointment Scheduler <= 4.2.1 - Cross-Site Request Forgery to Settings Change
Medium
CVE-2025-31596
Chat by Chatwee <= 2.1.3 - Missing Authorization
Medium
CVE-2025-31557
OSM – OpenStreetMap <= 6.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31566
Rio Video Gallery <= 2.3.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-31621
byBrick Accordion <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31625
Useinfluence <= 1.0.8 - Cross-Site Request Forgery
Medium
CVE-2025-31529
Slider Path for Elementor <= 3.0.0 - Missing Authorization
Medium
CVE-2025-31620
CoverManager <= 0.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31376
NanoSupport <= 0.6.0 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.