Browse CVEs

HIGH 7.5 CVE-2025-51846 CryptPad 2025.3.1 allows unbounded WebSocket frame flood. A remote, unauthenticated attacker can significantly degrade or deny service for all users … Cryptpad 2026.2.2+ Fix from $1,9502026-04-30 MEDIUM 6.1 CVE-2026-40105 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Versions 10.4-rc-1, through 16.10.15, 17.0.… Xwiki 16.10.16 / 17.4.8+ Fix from $1,6002026-04-15 HIGH 8.2 CVE-2026-40104 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Versions 1.8-rc-1, 17.0.0-rc-1 and 17.5.0-rc… Xwiki 16.10.16 / 17.4.8+ Fix from $1,9502026-04-15 CRITICAL 9.8 CVE-2026-33229 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Prior to 17.4.8 and 17.10.1, an improperly p… Xwiki 17.4.8 / 17.10.1+ Fix from $2,3002026-04-08 CRITICAL 9.0 CVE-2025-66024 The XWiki blog application allows users of the XWiki platform to create and manage blog posts. Versions starting with 9.15 and prior to 9.15.7 are vu… Blog Application 9.15.7+ Fix from $2,3002026-03-04 MEDIUM 6.1 CVE-2026-26000 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Prior to 17.9.0, 17.4.6, and 16.10.13, it's … Xwiki 16.10.13 / 17.4.6+ Fix from $1,6002026-02-12 MEDIUM 6.1 CVE-2026-24128 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Versions 7.0-milestone-2 through 16.10.11, 1… Xwiki 16.10.12 / 17.4.5+ Fix from $1,6002026-01-24 CRITICAL 10.0 CVE-2025-65091 XWiki Full Calendar Macro displays objects from the wiki on the calendar. Prior to version 2.4.5, users with the right to view the Calendar.JSONServi… Full Calendar Macro 2.4.5+ Fix from $2,3002026-01-10 MEDIUM 5.3 CVE-2025-65090 XWiki Full Calendar Macro displays objects from the wiki on the calendar. Prior to version 2.4.6, users with the rights to view the Calendar.JSONServ… Full Calendar Macro 2.4.6+ Fix from $1,6002026-01-10 HIGH 8.8 CVE-2025-66474 XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML, etc)… Xwiki Rendering 16.10.10 / 17.4.3+ Fix from $1,9502025-12-10 HIGH 7.5 CVE-2025-66473 XWiki is an open-source wiki software platform. Versions 16.10.10 and below, 17.0.0-rc-1 through 17.4.3 and 17.5.0-rc-1 through 17.6.0 contain a REST… Xwiki 16.10.11 / 17.4.4+ Fix from $1,9502025-12-10 MEDIUM 6.1 CVE-2025-66472 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Versions 6.2-milestone-1 through 16.10.9 and… Xwiki 16.10.10 / 17.4.2+ Fix from $1,6002025-12-10 HIGH 8.3 CVE-2025-65036 XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Prior to 1.27.1, the macro executes Veloc… Pro Macros 1.27.1+ Fix from $1,9502025-12-05 HIGH 7.5 CVE-2025-55749 XWiki is an open-source wiki software platform. From 16.7.0 to 16.10.11, 17.4.4, or 17.7.0, in an instance which is using the XWiki Jetty package (XJ… Xwiki 16.10.11 / 17.4.4+ Fix from $1,9502025-12-01 MEDIUM 6.5 CVE-2025-65089 XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Prior to version 1.27.0, a user with no v… Pro Macros 1.27.0+ Fix from $1,6002025-11-19 CRITICAL 9.8 CVE-2025-55727 XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Starting in version 1.0 and prior to vers… Pro Macros 1.26.5+ Fix from $2,3002025-09-09 CRITICAL 9.8 CVE-2025-55728 XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Starting in version 1.0 and prior to vers… Pro Macros 1.26.5+ Fix from $2,3002025-09-09 HIGH 7.5 CVE-2025-55748 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 4.2-milestone-2 through 16.10.6,… Xwiki 16.10.7+ Fix from $1,9502025-09-03 CRITICAL 9.1 CVE-2025-55747 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 6.1-milestone-2 through 16.10.6… Xwiki 16.10.7+ Fix from $2,3002025-09-03 HIGH 7.5 CVE-2025-58049 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions from 14.4.2 to before 16.4.8, 16… Xwiki 16.4.8 / 16.10.7+ Fix from $1,9502025-08-28 HIGH 8.8 CVE-2025-51991 XWiki through version 17.3.0 is vulnerable to Server-Side Template Injection (SSTI) in the Administration interface, specifically within the HTTP Met… Xwiki after 17.3.0 Fix from $1,9502025-08-20 MEDIUM 6.5 CVE-2025-54124 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki Platform Legacy Old Core and XWiki Pla… Xwiki 16.4.7 / 16.10.5+ Fix from $1,6002025-08-06 MEDIUM 6.5 CVE-2025-54125 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki Platform Legacy Old Core and XWiki Pla… Xwiki 16.4.7 / 16.10.5+ Fix from $1,6002025-08-06 MEDIUM 6.1 CVE-2025-32430 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 4.2-milestone-3 through 16.4.7, … Xwiki 16.4.8 / 16.10.6+ Fix from $1,6002025-08-06 CRITICAL 9.8 CVE-2025-54385 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions between 17.0.0-rc1 to 17.2.2 and… Xwiki 16.10.6+ Fix from $2,3002025-07-26 CRITICAL 9.8 CVE-2025-32429EPSS 85% XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 9.4-rc-1 through 16.10.5 and 17.… Xwiki 16.10.6+ Fix from $2,3002025-07-24 HIGH 8.8 CVE-2025-53836 XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML, etc)… Xwiki 13.10.11 / 14.4.7+ Fix from $1,9502025-07-15 CRITICAL 9.0 CVE-2025-53835 XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML, etc)… Xwiki 14.10+ Fix from $2,3002025-07-14 CRITICAL 9.1 CVE-2025-49591 CryptPad is a collaboration suite. Prior to version 2025.3.0, enforcement of Two-Factor Authentication (2FA) in CryptPad can be trivially bypassed, d… Cryptpad 2025.3.0+ Fix from $2,3002025-06-18 MEDIUM 6.1 CVE-2025-49590 CryptPad is a collaboration suite. Prior to version 2025.3.0, the "Link Bouncer" functionality attempts to filter javascript URIs to prevent Cross-Si… Cryptpad 2025.3.0+ Fix from $1,6002025-06-18