Low
CVE-2025-44021
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,319
Reset filters
Medium
CVE-2025-24887
OpenCTI is an open-source cyber threat intelligence platform. In versions starting from 6.4.8 to before 6.4.10, the allow/deny lists can be bypassed, allowing a user to change attributes that are inte
High
ghsa-22fp-mf44-f2mq
youtube-dl vulnerable to file system modification and RCE through improper file-extension sanitization
Critical
CVE-2025-32428
TigerVNC accessible via the network and not just via a UNIX socket as intended
Critical
CVE-2025-32013
LNbits Lightning Network Payment System Vulnerable to Server-Side Request Forgery via LNURL Authentication Callback
Medium
CVE-2025-31116
Mobile Security Framework (MobSF) has a SSRF Vulnerability fix bypass on assetlinks_check with DNS Rebinding
High
CVE-2024-8616
H2O Vulnerable to Arbitrary File Overwrite
Critical
CVE-2024-7776
A vulnerability in the `download_model` function of the onnx/onnx framework, before and including version 1.16.1, allows for arbitrary file overwrite due to inadequate prevention of path traversal att
High
CVE-2024-6854
H2O Vulnerable to Arbitrary File Overwrite via File Export
Medium
CVE-2024-6863
H2O Vulnerable to Execution of Arbitrary Files
Critical
CVE-2024-6829
Aim External Control of File Name or Path vulnerability
High
ghsa-w466-2wfc-8g58
Open WebUI has vulnerable dependency on starlette via fastapi
Critical
CVE-2024-10831
DB-GPT Absolute Path Traversal vulnerability
Critical
CVE-2024-10833
DB-GPT Absolute Path Traversal in knowledge/{space_name}/document/upload
Medium
CVE-2025-0188
A Server-Side Request Forgery (SSRF) vulnerability was discovered in gaizhenbiao/chuanhuchatgpt version 20240914. The vulnerability allows an attacker to construct a response link by saving the respon
Medium
CVE-2024-9159
An incorrect authorization vulnerability exists in gaizhenbiao/chuanhuchatgpt version git c91dbfc. The vulnerability allows any user to restart the server at will, leading to a complete loss of availa
Medium
CVE-2025-29779
Post-Quantum Secure Feldman's Verifiable Secret Sharing has Inadequate Fault Injection Countermeasures in `secure_redundant_execution`
High
CVE-2025-1550
Arbitrary Code Execution via Crafted Keras Config for Model Loading
High
ghsa-3x5x-fw77-g54c
dmlc/dgl Vulnerable to Remote Code Execution by Pickle Deserialization via rpc.recv_request()
Low
CVE-2025-27105
AugAssign evaluation order causing OOB write within the object in Vyper
Low
CVE-2025-27104
Vyper has a double eval in For List Iter
High
CVE-2025-1403
Malciously crafted QPY files can allows Remote Attackers to Cause Denial of Service in Qiskit
Critical
CVE-2025-24370
Django-Unicorn Class Pollution Vulnerability, Leading to XSS, DoS and Authentication Bypass
High
ghsa-vp47-9734-prjw
ASTEVAL Allows Malicious Tampering of Exposed AST Nodes Leads to Sandbox Escape
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.