Niedrig
CVE-2025-62780
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 6.855
Filter zurücksetzen
Niedrig
CVE-2025-64481
Open redirect endpoint in Datasette
Hoch
CVE-2025-64496
Open WebUI Affected by an External Model Server (Direct Connections) Code Injection via SSE Events
Hoch
CVE-2025-64495
Open WebUI vulnerable to Stored DOM XSS via prompts when 'Insert Prompt as Rich Text' is enabled resulting in ATO/RCE
Niedrig
CVE-2025-64326
Weblate leaks the IP of project member inviting user to be reviewer in Audit log
Kritisch
CVE-2025-64459
An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8.
Hoch
CVE-2025-64458
Django has a denial-of-service vulnerability in HttpResponseRedirect and HttpResponsePermanentRedirect on Windows
Mittel
CVE-2020-25635
A flaw was found in Ansible Base when using the aws_ssm connection plugin as garbage collector is not happening after playbook run is completed. Files would remain in the bucket exposing the data. Thi
Kritisch
CVE-2025-57108
Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap use-after-free vulnerability in vtkGLTFDocumentLoader. The vulnerability manifests during mesh object copy operations where vector mem
Hoch
CVE-2025-57107
Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap buffer overflow vulnerability in vtkGLTFDocumentLoader. When processing specially crafted GLTF files, the copy constructor of Accessor
Hoch
CVE-2025-57106
Kitware VTK (Visualization Toolkit) up to 9.5.0 is vulnerable to Buffer Overflow in vtkGLTFDocumentLoader. The vulnerability occurs in the BufferDataExtractionWorker template function when processing
Mittel
CVE-2025-62503
Apache Airflow's create action can upsert existing Pools/Connections/Variables
Mittel
CVE-2025-54941
Apache Airflow has a command injection vulnerability in "example_dag_decorator"
Mittel
CVE-2025-62402
Apache Airflow `/api/v2/dagReports` executes DAG Python in API
Mittel
ghsa-grjp-54v3-c442
OpenUSD File Parsing Use-After-Free Remote Code Execution Vulnerability
Mittel
CVE-2025-13327
A flaw was found in uv. This vulnerability allows an attacker to execute malicious code during package resolution or installation via specially crafted ZIP (Zipped Information Package) archives that e
Hoch
CVE-2025-11200
MLflow Weak Password Requirements Authentication Bypass Vulnerability
Hoch
CVE-2025-11201
MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability
Hoch
ghsa-c2jp-c369-7pvx
FastMCP Auth Integration Allows for Confused Deputy Account Takeover
Mittel
CVE-2025-40843
CodeChecker has a buffer overflow in the log command
Mittel
ghsa-cq46-m9x9-j8w2
Scapy Session Loading Vulnerable to Arbitrary Code Execution via Untrusted Pickle Deserialization
Niedrig
ghsa-w476-p2h3-79g9
uv has differential in tar extraction with PAX headers
Mittel
CVE-2025-62528
Taguette vulnerable to cross-site scripting via tag name, tag description, document name and document description
Hoch
CVE-2025-62527
Taguette password reset link poisoning
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.