High
CVE-2025-64076
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 733
Reset filters
Low
CVE-2025-62780
changedetection.io: Stored XSS in Watch update via API
High
CVE-2025-64496
Open WebUI Affected by an External Model Server (Direct Connections) Code Injection via SSE Events
High
CVE-2025-64495
Open WebUI vulnerable to Stored DOM XSS via prompts when 'Insert Prompt as Rich Text' is enabled resulting in ATO/RCE
Medium
CVE-2025-40843
CodeChecker has a buffer overflow in the log command
Critical
CVE-2025-62515
pyquokka is Vulnerable to Remote Code Execution by Pickle Deserialization via FlightServer
High
CVE-2025-9905
The Keras `Model.load_model` method **silently** ignores `safe_mode=True` and allows arbitrary code execution when a `.h5`/`.hdf5` file is loaded.
Critical
CVE-2025-10157
Picklescan is Vulnerable to Unsafe Globals Check Bypass through Subclass Imports
Critical
CVE-2025-10156
Picklescan: ZIP archive scan bypass is possible through non-exhaustive Cyclic Redundancy Check
Critical
CVE-2025-10155
Picklescan Bypass is Possible via File Extension Mismatch
High
CVE-2025-58757
Monai: Unsafe use of Pickle deserialization may lead to RCE
High
CVE-2025-58756
MONAI: Unsafe torch usage may lead to arbitrary code execution
High
CVE-2023-41471
Cross Site Scripting vulnerability in copyparty before 1.9.2 allows a local attacker to execute arbitrary code via a crafted payload to the WEEKEND-PLANS function. NOTE: this is disputed because WEEKE
Medium
CVE-2025-71364
Picklescan is missing detection when calling built-in python library asyncio.unix_events._UnixSubprocessTransport._start
Medium
CVE-2025-71363
Picklescan is missing detection when calling built-in python cProfile.run
Medium
CVE-2025-71368
Picklescan is missing detection when calling built-in python doctest.debug_script
Medium
CVE-2025-71340
Picklescan is missing detection when calling built-in python idlelib.pyshell.ModifiedInterpreter.runcode
Medium
CVE-2025-71342
Picklescan is missing detection when calling built-in python idlelib.run.Executive.runcode
Medium
CVE-2025-71343
Picklescan is missing detection when calling built-in python lib2to3.pgen2.pgen.ParserGenerator.make_label
Medium
CVE-2025-71345
Picklescan is missing detection when calling pytorch function torch.utils.bottleneck.__main__.run_autograd_prof
Medium
CVE-2025-71360
Picklescan has a missing detection when calling built-in python library idlelib.calltip.get_entity
Medium
CVE-2025-71371
Picklescan has a missing detection when calling built-in python code.InteractiveInterpreter
Medium
CVE-2025-71359
Picklescan has a missing detection when calling built-in python lib2to3.pgen2.grammar.Grammar.loads
Medium
CVE-2025-71374
Picklescan has a missing detection when calling built-in python profile.Profile.run
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.