Medium
CVE-2025-46152
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,855
Reset filters
Medium
CVE-2025-46150
In PyTorch before 2.7.0, when torch.compile is used, FractionalMaxPool2d has inconsistent results.
Medium
CVE-2025-46149
In PyTorch before 2.7.0, when inductor is used, nn.Fold has an assertion error.
Medium
CVE-2025-46148
In PyTorch through 2.6.0, when eager is used, nn.PairwiseDistance(p=2) produces incorrect results.
Medium
CVE-2025-48459
Deserialization of Untrusted Data vulnerability in Apache IoTDB.
Critical
CVE-2025-6544
H2O affected by a deserialization vulnerability
High
CVE-2025-9906
Keras is vulnerable to Deserialization of Untrusted Data
High
CVE-2025-9905
The Keras `Model.load_model` method **silently** ignores `safe_mode=True` and allows arbitrary code execution when a `.h5`/`.hdf5` file is loaded.
Critical
CVE-2025-6237
InvokeAI has External Control of File Name or Path
Critical
CVE-2025-10157
Picklescan is Vulnerable to Unsafe Globals Check Bypass through Subclass Imports
Critical
CVE-2025-10156
Picklescan: ZIP archive scan bypass is possible through non-exhaustive Cyclic Redundancy Check
Critical
CVE-2025-10155
Picklescan Bypass is Possible via File Extension Mismatch
Medium
CVE-2025-49089
wangxutech MoneyPrinterTurbo 1.2.6 allows path traversal via /api/v1/download/ URIs such as /api/v1/download//etc/passwd.
Critical
CVE-2025-59377
mcp-kubernetes-server has an OS Command Injection vulnerability
High
CVE-2025-58757
Monai: Unsafe use of Pickle deserialization may lead to RCE
High
CVE-2025-58756
MONAI: Unsafe torch usage may lead to arbitrary code execution
High
CVE-2025-58755
MONAI does not prevent path traversal, potentially leading to arbitrary file writes
Critical
CVE-2025-58438
internetarchive Vulnerable to Directory Traversal in File.download()
Critical
CVE-2025-55037
TkEasyGUI Vulnerable to OS Command Injection
Critical
ghsa-58p5-r2f6-g2cj
Pixar OpenUSD Sdf_PathNode Module Use-After-Free Vulnerability Leading to Potential Remote Code Execution
Critical
CVE-2025-58367
DeepDiff Class Pollution in Delta class leading to DoS, Remote Code Execution, and more
High
CVE-2025-57833
Django is subject to SQL injection through its column aliases
High
CVE-2023-41471
Cross Site Scripting vulnerability in copyparty before 1.9.2 allows a local attacker to execute arbitrary code via a crafted payload to the WEEKEND-PLANS function. NOTE: this is disputed because WEEKE
Critical
CVE-2025-58050
The PCRE2 library is a set of C functions that implement regular expression pattern matching. In version 10.45, a heap-buffer-overflow read vulnerability exists in the PCRE2 regular expression matchin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.