Critical
CVE-2025-10156
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,358
Reset filters
Critical
CVE-2025-10155
Picklescan Bypass is Possible via File Extension Mismatch
Critical
CVE-2025-59377
mcp-kubernetes-server has an OS Command Injection vulnerability
High
CVE-2025-58757
Monai: Unsafe use of Pickle deserialization may lead to RCE
High
CVE-2025-58756
MONAI: Unsafe torch usage may lead to arbitrary code execution
High
CVE-2025-58755
MONAI does not prevent path traversal, potentially leading to arbitrary file writes
Critical
CVE-2025-58438
internetarchive Vulnerable to Directory Traversal in File.download()
Critical
ghsa-58p5-r2f6-g2cj
Pixar OpenUSD Sdf_PathNode Module Use-After-Free Vulnerability Leading to Potential Remote Code Execution
Critical
CVE-2025-58367
DeepDiff Class Pollution in Delta class leading to DoS, Remote Code Execution, and more
High
CVE-2023-41471
Cross Site Scripting vulnerability in copyparty before 1.9.2 allows a local attacker to execute arbitrary code via a crafted payload to the WEEKEND-PLANS function. NOTE: this is disputed because WEEKE
Medium
CVE-2025-71364
Picklescan is missing detection when calling built-in python library asyncio.unix_events._UnixSubprocessTransport._start
Medium
CVE-2025-71363
Picklescan is missing detection when calling built-in python cProfile.run
Medium
CVE-2025-71368
Picklescan is missing detection when calling built-in python doctest.debug_script
Medium
CVE-2025-71340
Picklescan is missing detection when calling built-in python idlelib.pyshell.ModifiedInterpreter.runcode
Medium
CVE-2025-71342
Picklescan is missing detection when calling built-in python idlelib.run.Executive.runcode
Medium
CVE-2025-71343
Picklescan is missing detection when calling built-in python lib2to3.pgen2.pgen.ParserGenerator.make_label
Medium
CVE-2025-71345
Picklescan is missing detection when calling pytorch function torch.utils.bottleneck.__main__.run_autograd_prof
Medium
CVE-2025-71360
Picklescan has a missing detection when calling built-in python library idlelib.calltip.get_entity
Medium
CVE-2025-71371
Picklescan has a missing detection when calling built-in python code.InteractiveInterpreter
Medium
CVE-2025-71359
Picklescan has a missing detection when calling built-in python lib2to3.pgen2.grammar.Grammar.loads
Medium
CVE-2025-71374
Picklescan has a missing detection when calling built-in python profile.Profile.run
Medium
CVE-2025-71352
Picklescan has a missing detection when calling built-in python trace.Trace.runctx
Medium
CVE-2025-71349
Picklescan has a missing detection when calling built-in python trace.Trace.run
Medium
ghsa-63cx-g855-hvv4
mitmproxy binaries embed a vulnerable python-hyper/h2 dependency
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.