Medium
CVE-2025-61911
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,338
Reset filters
Medium
CVE-2025-62706
Authlib : JWE zip=DEF decompression bomb enables DoS
Low
CVE-2025-59682
Django vulnerable to partial directory traversal via archives
Medium
CVE-2025-8406
ZenML is vulnerable to Path Traversal through its `PathMaterializer` class
Medium
CVE-2025-57275
SPDK is vulnerable to buffer overflow in the NVMe-oF target component
High
CVE-2025-59152
Litestar X-Forwarded-For Header Spoofing Vulnerability Enables Rate Limit Evasion
High
CVE-2025-6242
vLLM is vulnerable to Server-Side Request Forgery (SSRF) through `MediaConnector` class
High
CVE-2025-61784
LLaMA Factory's Chat API Contains Critical SSRF and LFI Vulnerabilities
Low
CVE-2025-59842
JupyterLab LaTeX typesetter links did not enforce `noopener` attribute
Medium
CVE-2025-8869
pip's fallback tar extraction doesn't check symbolic links point to extraction directory
High
CVE-2025-7647
llama-index-core insecurely handles temporary files
High
CVE-2025-58180
OctoPrint is Vulnerable to RCE Attacks via Unsanitized Filename in File Upload
Low
CVE-2025-58161
MobSF Path Traversal in GET /download/<filename> using absolute filenames
Low
CVE-2025-57815
Fides has a Lack of Brute-Force Protections on Authentication Endpoints
Low
CVE-2025-54080
Exiv2 Segmentation Faults in Exiv2::EpsImage::writeMetadata() via crafted EPS file
Medium
CVE-2025-58162
MobSF Vulnerable to Arbitrary File Write (AR-Slip) via Absolute Path in .a Extraction
Medium
CVE-2025-58068
Eventlet affected by HTTP request smuggling in unparsed trailers
High
CVE-2025-57751
Denial-of-Service attack in pyLoad CNL Blueprint using dukpy.evaljs
Medium
CVE-2025-55149
TinyScientist has Path Traversal Vulnerability in PDF Review Function (CWE-22)
Medium
CVE-2025-54368
uv allows ZIP payload obfuscation through parsing differentials
Medium
CVE-2025-53009
MaterialX Stack Overflow via Lack of MTLX XML Parsing Recursion Limit
Medium
CVE-2025-41419
MS SWIFT WEB-UI RCE Vulnerability
Medium
CVE-2025-48072
OpenEXR Out of Bounds Heap Read due to Bad Pointer Arithmetic in LossyDctDecoder_execute
Medium
CVE-2025-48073
OpenEXR ScanLineProcess::run_fill NULL Pointer Write In "reduceMemory" Mode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.