High
CVE-2026-25580
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 185
Reset filters
High
CVE-2025-13609
A vulnerability has been identified in keylime where an attacker can exploit this flaw by registering a new agent using a different Trusted Platform Module (TPM) device but claiming an existing agent'
High
ghsa-c2jp-c369-7pvx
FastMCP Auth Integration Allows for Confused Deputy Account Takeover
Critical
CVE-2025-32013
LNbits Lightning Network Payment System Vulnerable to Server-Side Request Forgery via LNURL Authentication Callback
Critical
CVE-2024-6829
Aim External Control of File Name or Path vulnerability
Medium
CVE-2023-51663
Hail relies on OIDC email claims to verify the validity of a user's domain.
Medium
ghsa-rqr8-pxh7-cq3g
Ethereum ABI decoder DoS when parsing ZST
Critical
CVE-2023-43791
Label Studio has Hardcoded Django `SECRET_KEY` that can be Abused to Forge Session Tokens
Critical
CVE-2023-38686
Sydent does not verify email server certificates
High
CVE-2023-32007
** UNSUPPORTED WHEN ASSIGNED ** The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has
Critical
CVE-2022-39227
python-jwt vulnerable to token forgery with new claims
Medium
ghsa-7r9x-qrpr-3cxw
mofh Vulnerable to Improper Restriction of XML External Entity Reference
Unrated
CVE-2021-44078
An issue was discovered in split_region in uc.c in Unicorn Engine before 2.0.0-rc5. It allows local attackers to escape the sandbox. An attacker must first obtain the ability to execute crafted code i
Critical
CVE-2021-43775
Arbitrary file reading vulnerability in Aim
High
CVE-2021-1725
botframework-connector vulnerable to Improper Authentication
High
CVE-2020-26244
Multiple cryptographic issues in Python oic
High
CVE-2020-15110
Possible pod name collisions in jupyterhub-kubespawner
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.