High
CVE-2025-25301
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,016
Reset filters
High
ghsa-3x5x-fw77-g54c
dmlc/dgl Vulnerable to Remote Code Execution by Pickle Deserialization via rpc.recv_request()
Low
CVE-2025-24023
Flask-AppBuilder Observable Response Discrepancy
Unrated
pysec-2025-6
Exfiltrates cookies to hardcoded IP address
Unrated
pysec-2025-5
Exfiltrates user cookies to hardcoded server endpoint during normal operations
Unrated
pysec-2025-3
When using the project to bypass Deezer API restrictions, project exfiltrates user data to a hardcoded server.
Unrated
pysec-2025-4
When using the project to bypass Deezer API restrictions, project exfiltrates user data to a hardcoded server.
High
CVE-2024-8550
A Local File Inclusion (LFI) vulnerability exists in the /load-workflow endpoint of modelscope/agentscope version v0.0.4. This vulnerability allows an attacker to read arbitrary files from the server,
Critical
CVE-2025-24370
Django-Unicorn Class Pollution Vulnerability, Leading to XSS, DoS and Authentication Bypass
Medium
CVE-2024-37303
Synapse's unauthenticated writes to the media repository allow planting of problematic content
High
CVE-2024-37302
Synapse denial of service through media disk space consumption
High
CVE-2024-54000
MobSF vulnerability allows SSRF due to the allow_redirects=True parameter
High
CVE-2024-52581
Litestar allows unbounded resource consumption (DoS vulnerability)
Critical
CVE-2024-47533
cobbler allows anyone to connect to cobbler XML-RPC server with known password and make changes
Medium
CVE-2024-51751
Gradio vulnerable to arbitrary file read with File and UploadButton components
Critical
CVE-2024-10081
codechecker vulnerable to authentication bypass when using specifically crafted URLs
High
CVE-2024-47821
pyLoad vulnerable to remote code execution by download to /.pyload/scripts using /flashgot API
High
CVE-2024-47871
Gradio uses insecure communication between the FRP client and server
High
CVE-2024-47870
Gradio has a race condition in update_root_in_config may redirect user traffic
Medium
CVE-2024-47872
Gradio has an XSS on every Gradio server via upload of HTML files, JS files, or SVG files
Medium
CVE-2024-47868
Gradio has several components with post-process steps allow arbitrary file leaks
High
CVE-2024-47867
Gradio lacks integrity checking on the downloaded FRP client
Medium
CVE-2024-47167
Gradio vulnerable to SSRF in the path parameter of /queue/join
Medium
CVE-2024-47165
Gradio's CORS origin validation accepts the null origin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.