| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2025-59018 | Information Disclosure in Workspaces Module | TYPO3 | TYPO3 CMS | - | - | 2025-09-09 09:01:10 | Deep Dive |
| CVE-2025-59017 | Broken Access Control in Backend AJAX Routes | TYPO3 | TYPO3 CMS | - | - | 2025-09-09 09:01:04 | Deep Dive |
| CVE-2025-59016 | Information Disclosure via File Abstraction Layer | TYPO3 | TYPO3 CMS | - | - | 2025-09-09 09:00:56 | Deep Dive |
| CVE-2025-59015 | Insufficient Entropy in Password Generation | TYPO3 | TYPO3 CMS | - | - | 2025-09-09 09:00:49 | Deep Dive |
| CVE-2025-59014 | Denial of Service in TYPO3 Bookmark Toolbar | TYPO3 | TYPO3 CMS | - | - | 2025-09-09 09:00:39 | Deep Dive |
| CVE-2025-59013 | Open Redirect in TYPO3 CMS | TYPO3 | TYPO3 CMS | - | - | 2025-09-09 09:00:23 | Deep Dive |
| CVE-2025-7385 | SQL Injection in GOV CMS | Concept Intermedia | GOV CMS | - | - | 2025-09-04 12:05:55 | Deep Dive |
| CVE-2025-4644 | User Session Fixation after Account Removal in PayloadCMS | Payload CMS | Payload | 中危 | - | 2025-08-29 10:01:14 | Deep Dive |
| CVE-2025-4643 | Lack of JWT Expiration after Log Out in PayloadCMS | Payload CMS | Payload | 中危 | - | 2025-08-29 10:01:09 | Deep Dive |
| CVE-2025-57811 | Craft Potential Remote Code Execution via Twig SSTI | craftcms | cms | - | - | 2025-08-25 17:52:08 | Deep Dive |
| CVE-2025-9400 | YiFang CMS P_file.php mergeMultipartUpload unrestricted upload | YiFang | CMS | Medium | 6.3 | 2025-08-25 00:32:06 | Deep Dive |
| CVE-2025-9399 | YiFang CMS L_tool.php sql injection | YiFang | CMS | Medium | 6.3 | 2025-08-25 00:02:06 | Deep Dive |
| CVE-2025-9398 | YiFang CMS Migrate.php exportInstallTable information disclosure | YiFang | CMS | Medium | 5.3 | 2025-08-24 23:32:07 | Deep Dive |
| CVE-2025-54175 | Reflected Cross-Site Scripting in QuickCMS.EXT | OpenSolution | Quick.CMS.EXT | - | - | 2025-08-20 12:53:24 | Deep Dive |
| CVE-2025-54174 | Cross-Site Request Forgery in QuickCMS | OpenSolution | Quick.CMS | - | - | 2025-08-20 12:53:10 | Deep Dive |
| CVE-2025-54172 | Stored Cross-Site Scripting in QuickCMS | OpenSolution | Quick.CMS | - | - | 2025-08-20 12:52:48 | Deep Dive |
| CVE-2012-10054 | Umbraco CMS < 4.7.1 codeEditorSave.asmx RCE | Umbraco | CMS | - | - | 2025-08-13 20:54:39 | Deep Dive |
| CVE-2011-10009 | S40 CMS 0.4.2 Path Traversal | S40 CMS | S40 CMS | - | - | 2025-08-13 20:52:52 | Deep Dive |
| CVE-2025-54417 | Craft contains a theoretical bypass for CVE-2025-23209 | craftcms | cms | 中危 | - | 2025-08-09 01:31:24 | Deep Dive |
| CVE-2012-10042 | Sflog! CMS 1.0 Arbitrary File Upload RCE | Sflog! | Sflog! CMS | 中危 | - | 2025-08-08 18:12:32 | Deep Dive |