High
CVE-2025-71344
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,358
Reset filters
High
CVE-2025-71361
Picklescan has a missing detection when calling built-in python idlelib.calltip.Calltip
High
CVE-2025-71358
Picklescan has a missing detection when calling built-in python idlelib.autocomplete.AutoComplete.get_entity
High
CVE-2025-71354
Picklescan has a missing detection when calling built-in python idlelib.debugobj.ObjectTreeItem
Low
CVE-2025-54080
Exiv2 Segmentation Faults in Exiv2::EpsImage::writeMetadata() via crafted EPS file
Low
CVE-2025-55304
Exiv2 has quadratic performance in ICC profile parsing in JpegBase::readMetadata
Medium
CVE-2025-58162
MobSF Vulnerable to Arbitrary File Write (AR-Slip) via Absolute Path in .a Extraction
High
CVE-2025-57808
ESP-IDF web_server basic auth bypass using empty or incomplete Authorization header
Medium
CVE-2025-58068
Eventlet affected by HTTP request smuggling in unparsed trailers
High
CVE-2025-5302
LlamaIndex affected by a Denial of Service (DOS) in JSONReader
Medium
CVE-2025-55673
Apache Superset data query improperly discloses database schema information to low-privileged guest user
Medium
CVE-2025-55675
Apache Superset allows authenticated users to discover metadata about datasources they don't have permission to access
High
CVE-2025-57809
XGrammar affected by Denial of Service by infinite recursion grammars
High
CVE-2025-48956
vllm API endpoints vulnerable to Denial of Service Attacks
High
CVE-2025-57751
Denial-of-Service attack in pyLoad CNL Blueprint using dukpy.evaljs
Medium
CVE-2025-54791
OMERO.web displays unecessary user information when requesting password reset
Medium
CVE-2025-55214
Copier's safe template has filesystem write access outside destination path
High
CVE-2025-9141
vLLM has remote code execution vulnerability in the tool call parser for Qwen3-Coder
High
CVE-2025-55201
Copier's safe template has arbitrary filesystem read/write access
Medium
CVE-2025-55149
TinyScientist has Path Traversal Vulnerability in PDF Review Function (CWE-22)
High
CVE-2025-71325
Picklescan has pickle parsing logic flaw that leads to malicious pickle file bypass
Medium
CVE-2025-54368
uv allows ZIP payload obfuscation through parsing differentials
High
CVE-2025-54886
SKOPS Card.get_model happily allows arbitrary code execution
High
CVE-2025-55156
PyLoad vulnerable to SQL Injection via API /json/add_package in add_links parameter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.