Critical
ghsa-m9mp-6x32-5rhg
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,333
Reset filters
Critical
CVE-2025-10157
Picklescan is Vulnerable to Unsafe Globals Check Bypass through Subclass Imports
High
CVE-2025-58757
Monai: Unsafe use of Pickle deserialization may lead to RCE
High
CVE-2025-58755
MONAI does not prevent path traversal, potentially leading to arbitrary file writes
Critical
CVE-2025-58438
internetarchive Vulnerable to Directory Traversal in File.download()
Critical
ghsa-58p5-r2f6-g2cj
Pixar OpenUSD Sdf_PathNode Module Use-After-Free Vulnerability Leading to Potential Remote Code Execution
Critical
CVE-2025-58367
DeepDiff Class Pollution in Delta class leading to DoS, Remote Code Execution, and more
Medium
CVE-2025-71364
Picklescan is missing detection when calling built-in python library asyncio.unix_events._UnixSubprocessTransport._start
High
CVE-2025-57760
Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation (Post-RCE)
Low
ghsa-674p-xv2x-rf3g
Litestar has potential log injection in exception logging
Medium
ghsa-r54c-2xmf-2cf3
MS SWIFT Deserialization RCE Vulnerability
High
CVE-2024-5187
onnx allows Arbitrary File Overwrite in download_model_with_test_data
High
CVE-2025-53528
Cadwyn vulnerable to XSS on the docs page
High
CVE-2025-47782
motionEye vulnerable to RCE in add_camera Function Due to unsafe command execution
Low
CVE-2025-44021
OpenStack Ironic before 29.0.1 can write unintended files to a target node disk during image handling (if a deployment was performed via the API). A malicious project assigned as a node owner can prov
Medium
CVE-2025-24887
OpenCTI is an open-source cyber threat intelligence platform. In versions starting from 6.4.8 to before 6.4.10, the allow/deny lists can be bypassed, allowing a user to change attributes that are inte
High
ghsa-22fp-mf44-f2mq
youtube-dl vulnerable to file system modification and RCE through improper file-extension sanitization
Critical
CVE-2025-32428
TigerVNC accessible via the network and not just via a UNIX socket as intended
Critical
CVE-2025-32013
LNbits Lightning Network Payment System Vulnerable to Server-Side Request Forgery via LNURL Authentication Callback
Medium
CVE-2025-31116
Mobile Security Framework (MobSF) has a SSRF Vulnerability fix bypass on assetlinks_check with DNS Rebinding
High
CVE-2024-8616
H2O Vulnerable to Arbitrary File Overwrite
Critical
CVE-2024-7776
A vulnerability in the `download_model` function of the onnx/onnx framework, before and including version 1.16.1, allows for arbitrary file overwrite due to inadequate prevention of path traversal att
High
CVE-2024-6854
H2O Vulnerable to Arbitrary File Overwrite via File Export
Medium
CVE-2024-6863
H2O Vulnerable to Execution of Arbitrary Files
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.