High
CVE-2025-59425
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 240
Reset filters
High
CVE-2025-59042
PyInstaller has local privilege escalation vulnerability
Medium
CVE-2025-53012
MaterialX Lack of MTLX Import Depth Limit Leads to DoS (Denial-Of-Service) Via Stack Exhaustion
High
CVE-2025-54140
`pyLoad` has Path Traversal Vulnerability in `json/upload` Endpoint that allows Arbitrary File Write
Low
CVE-2024-53995
GHSL-2024-288: SickChill open redirect in login
Medium
CVE-2024-52294
khoj has an IDOR in subscription management allows unauthorized subscription modifications
Medium
CVE-2024-43371
Potential access to sensitive URLs via CKAN extensions (SSRF)
Medium
CVE-2024-41955
MobSF vulnerable to Open Redirect in Login Redirect
High
CVE-2024-38519
yt-dlp File system modification and RCE through improper file-extension sanitization
Medium
CVE-2024-31223
Information Disclosure Vulnerability in Privacy Center of SERVER_SIDE_FIDES_API_URL
Medium
CVE-2024-5629
PyMongo Out-of-bounds Read in the bson module
Medium
CVE-2024-52288
LibOSDP RMAC revert to the beginning of the session
Medium
CVE-2024-52296
LibOSDP vulnerable to a null pointer deref in osdp_reply_name
Medium
CVE-2024-24808
pyLoad open redirect vulnerability due to improper validation of the is_safe_url function
Medium
CVE-2024-21645
pyload Log Injection vulnerability
Medium
CVE-2017-7266
Netflix Security Monkey Open Redirect vulnerability
Medium
CVE-2022-0869
Open Redirect in django-spirit
High
CVE-2026-57516
Ray: Arbitrary code execution via ray.data.read_webdataset default decoder: pickle.loads(value) and torch.load(weights_only=False)
Critical
CVE-2026-48039
Meta Ads MCP: Unauthenticated HTTP MCP Tool Execution Leaks Operator Meta Access Token
Critical
CVE-2026-38360
dash-uploader has a directory traversal vulnerability
Medium
ghsa-w2j7-f3c6-g8cw
Flask-Security has an Open Redirect issue
High
CVE-2026-54317
Home Assistant: Konnected alarm-panel switch state and zone topology disclosed to unauthenticated actors on the LAN
Medium
CVE-2026-44889
WebOb: Location header normalization during redirect leads to open redirect - again
High
CVE-2026-42359
A bug in Apache Airflow's XCom PATCH endpoint `PATCH /api/v2/xcomEntries/{key}` allowed an authenticated UI/API user with XCom write permission on a Dag to set XCom entries under reserved key names (e
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.