Vulnerability index

Browse CVEs

258 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Cryptpad HIGH 7.5
CVE-2025-51846

CryptPad 2025.3.1 allows unbounded WebSocket frame flood. A remote, unauthenticated attacker can significantly degrade or deny service for all users …

Fix: 2026.2.2+
Fix from $1,950 2026-04-30
Xwiki MEDIUM 6.1
CVE-2026-40105

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Versions 10.4-rc-1, through 16.10.15, 17.0.…

Fix: 16.10.16 / 17.4.8+
Fix from $1,600 2026-04-15
Xwiki HIGH 8.2
CVE-2026-40104

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Versions 1.8-rc-1, 17.0.0-rc-1 and 17.5.0-rc…

Fix: 16.10.16 / 17.4.8+
Fix from $1,950 2026-04-15
Xwiki CRITICAL 9.8
CVE-2026-33229

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Prior to 17.4.8 and 17.10.1, an improperly p…

Fix: 17.4.8 / 17.10.1+
Fix from $2,300 2026-04-08
Blog Application CRITICAL 9.0
CVE-2025-66024

The XWiki blog application allows users of the XWiki platform to create and manage blog posts. Versions starting with 9.15 and prior to 9.15.7 are vu…

Fix: 9.15.7+
Fix from $2,300 2026-03-04
Xwiki MEDIUM 6.1
CVE-2026-26000

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Prior to 17.9.0, 17.4.6, and 16.10.13, it's …

Fix: 16.10.13 / 17.4.6+
Fix from $1,600 2026-02-12
Xwiki MEDIUM 6.1
CVE-2026-24128

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Versions 7.0-milestone-2 through 16.10.11, 1…

Fix: 16.10.12 / 17.4.5+
Fix from $1,600 2026-01-24
Full Calendar Macro CRITICAL 10.0
CVE-2025-65091

XWiki Full Calendar Macro displays objects from the wiki on the calendar. Prior to version 2.4.5, users with the right to view the Calendar.JSONServi…

Fix: 2.4.5+
Fix from $2,300 2026-01-10
Full Calendar Macro MEDIUM 5.3
CVE-2025-65090

XWiki Full Calendar Macro displays objects from the wiki on the calendar. Prior to version 2.4.6, users with the rights to view the Calendar.JSONServ…

Fix: 2.4.6+
Fix from $1,600 2026-01-10
Xwiki Rendering HIGH 8.8
CVE-2025-66474

XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML, etc)…

Fix: 16.10.10 / 17.4.3+
Fix from $1,950 2025-12-10
Xwiki HIGH 7.5
CVE-2025-66473

XWiki is an open-source wiki software platform. Versions 16.10.10 and below, 17.0.0-rc-1 through 17.4.3 and 17.5.0-rc-1 through 17.6.0 contain a REST…

Fix: 16.10.11 / 17.4.4+
Fix from $1,950 2025-12-10
Xwiki MEDIUM 6.1
CVE-2025-66472

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Versions 6.2-milestone-1 through 16.10.9 and…

Fix: 16.10.10 / 17.4.2+
Fix from $1,600 2025-12-10
Pro Macros HIGH 8.3
CVE-2025-65036

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Prior to 1.27.1, the macro executes Veloc…

Fix: 1.27.1+
Fix from $1,950 2025-12-05
Xwiki HIGH 7.5
CVE-2025-55749

XWiki is an open-source wiki software platform. From 16.7.0 to 16.10.11, 17.4.4, or 17.7.0, in an instance which is using the XWiki Jetty package (XJ…

Fix: 16.10.11 / 17.4.4+
Fix from $1,950 2025-12-01
Pro Macros MEDIUM 6.5
CVE-2025-65089

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Prior to version 1.27.0, a user with no v…

Fix: 1.27.0+
Fix from $1,600 2025-11-19
Pro Macros CRITICAL 9.8
CVE-2025-55727

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Starting in version 1.0 and prior to vers…

Fix: 1.26.5+
Fix from $2,300 2025-09-09
Pro Macros CRITICAL 9.8
CVE-2025-55728

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Starting in version 1.0 and prior to vers…

Fix: 1.26.5+
Fix from $2,300 2025-09-09
Xwiki HIGH 7.5
CVE-2025-55748

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 4.2-milestone-2 through 16.10.6,…

Fix: 16.10.7+
Fix from $1,950 2025-09-03
Xwiki CRITICAL 9.1
CVE-2025-55747

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 6.1-milestone-2 through 16.10.6…

Fix: 16.10.7+
Fix from $2,300 2025-09-03
Xwiki HIGH 7.5
CVE-2025-58049

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions from 14.4.2 to before 16.4.8, 16…

Fix: 16.4.8 / 16.10.7+
Fix from $1,950 2025-08-28
Xwiki HIGH 8.8
CVE-2025-51991

XWiki through version 17.3.0 is vulnerable to Server-Side Template Injection (SSTI) in the Administration interface, specifically within the HTTP Met…

Fix: after 17.3.0
Fix from $1,950 2025-08-20
Xwiki MEDIUM 6.5
CVE-2025-54124

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki Platform Legacy Old Core and XWiki Pla…

Fix: 16.4.7 / 16.10.5+
Fix from $1,600 2025-08-06
Xwiki MEDIUM 6.5
CVE-2025-54125

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki Platform Legacy Old Core and XWiki Pla…

Fix: 16.4.7 / 16.10.5+
Fix from $1,600 2025-08-06
Xwiki MEDIUM 6.1
CVE-2025-32430

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 4.2-milestone-3 through 16.4.7, …

Fix: 16.4.8 / 16.10.6+
Fix from $1,600 2025-08-06
Xwiki CRITICAL 9.8
CVE-2025-54385

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions between 17.0.0-rc1 to 17.2.2 and…

Fix: 16.10.6+
Fix from $2,300 2025-07-26
Xwiki CRITICAL 9.8
CVE-2025-32429EPSS 85%

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 9.4-rc-1 through 16.10.5 and 17.…

Fix: 16.10.6+
Fix from $2,300 2025-07-24
Xwiki HIGH 8.8
CVE-2025-53836

XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML, etc)…

Fix: 13.10.11 / 14.4.7+
Fix from $1,950 2025-07-15
Xwiki CRITICAL 9.0
CVE-2025-53835

XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML, etc)…

Fix: 14.10+
Fix from $2,300 2025-07-14
Cryptpad CRITICAL 9.1
CVE-2025-49591

CryptPad is a collaboration suite. Prior to version 2025.3.0, enforcement of Two-Factor Authentication (2FA) in CryptPad can be trivially bypassed, d…

Fix: 2025.3.0+
Fix from $2,300 2025-06-18
Cryptpad MEDIUM 6.1
CVE-2025-49590

CryptPad is a collaboration suite. Prior to version 2025.3.0, the "Link Bouncer" functionality attempts to filter javascript URIs to prevent Cross-Si…

Fix: 2025.3.0+
Fix from $1,600 2025-06-18