Mittel
CVE-2025-48943
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 2.016
Filter zurücksetzen
Mittel
CVE-2025-48942
vLLM DOS: Remotely kill vllm over http with invalid JSON schema
Mittel
CVE-2025-48887
vLLM has a Regular Expression Denial of Service (ReDoS, Exponential Complexity) Vulnerability in `pythonic_tool_parser.py`
Mittel
CVE-2025-48889
Gradio Allows Unauthorized File Copy via Path Manipulation
Niedrig
CVE-2025-46570
Potential Timing Side-Channel Vulnerability in vLLM’s Chunk-Based Prefix Caching
Mittel
CVE-2025-26621
OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.5.2, any user with the capability manage customizations can edit webhook that wi
Hoch
CVE-2025-47782
motionEye vulnerable to RCE in add_camera Function Due to unsafe command execution
Kritisch
CVE-2025-24977
OpenCTI is an open cyber threat intelligence (CTI) platform. Prior to version 6.4.11 any user with the capability `manage customizations` can execute commands on the underlying infrastructure where Op
Hoch
CVE-2025-46417
Picklescan Vulnerable to Exfiltration via DNS via linecache and ssl.get_server_certificate
Mittel
CVE-2025-32788
OctoPrint Authenticated Reverse Proxy Page Authentication Bypass
Mittel
ghsa-hf3c-wxg2-49q9
vLLM vulnerable to Denial of Service by abusing xgrammar cache
Kritisch
CVE-2025-32428
TigerVNC accessible via the network and not just via a UNIX socket as intended
Mittel
CVE-2025-32381
xgrammar Vulnerable to Denial of Service (DoS) by abusing unbounded cache in memory
Kritisch
CVE-2025-32375
BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.8, there was an insecure deserialization in BentoML's runner server. By setting
Kritisch
CVE-2025-32013
LNbits Lightning Network Payment System Vulnerable to Server-Side Request Forgery via LNURL Authentication Callback
Mittel
CVE-2025-31116
Mobile Security Framework (MobSF) has a SSRF Vulnerability fix bypass on assetlinks_check with DNS Rebinding
Hoch
ghsa-5ccf-884p-4jjq
Open WebUI Unauthenticated Multipart Boundary Denial of Service (DoS) Vulnerability
Kritisch
CVE-2024-9070
BentoML deserialization vulnerability
Hoch
CVE-2024-8616
H2O Vulnerable to Arbitrary File Overwrite
Kritisch
CVE-2024-8502
AgentScope Deserialization Vulnerability
Hoch
CVE-2024-8438
A path traversal vulnerability exists in modelscope/agentscope version v.0.0.4. The API endpoint `/api/file` does not properly sanitize the `path` parameter, allowing an attacker to read arbitrary fil
Kritisch
CVE-2024-8487
A Cross-Origin Resource Sharing (CORS) vulnerability exists in modelscope/agentscope version v0.0.4. The CORS configuration on the agentscope server does not properly restrict access to only trusted o
Hoch
CVE-2024-8020
PyTorch Lightning denial of service vulnerability
Hoch
CVE-2024-7983
Open WebUI denial of service through endpoint for converting markdown
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.