High
CVE-2025-59042
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,405
Medium
CVE-2025-59034
Indico may disclose unauthorized user details access via legacy API
Medium
CVE-2025-58065
Flask App Builder has an Authentication Bypass vulnerability when using non AUTH_DB methods
Medium
CVE-2025-58753
copyparty: Sharing a single file does not fully restrict access to other files in source folder
Medium
CVE-2025-59035
Indico vulnerable to Cross-Site Scripting via LaTeX math code
Medium
CVE-2025-59036
Infrahub: Deleted and expired API tokens can still authenticate
High
CVE-2025-10193
Neo4j Cypher MCP server is vulnerable to DNS rebinding
High
CVE-2025-57817
Fides Webserver API is Vulnerable to OAuth Client Privilege Escalation
High
CVE-2025-58180
OctoPrint is Vulnerable to RCE Attacks via Unsanitized Filename in File Upload
Medium
CVE-2025-58446
xgrammar vulnerable to denial of service by huge enum grammar
High
CVE-2025-55671
TkEasyGUI Affected by Uncontrolled Search Path Element Issue
Low
CVE-2025-58352
Weblate has a long session expiry when verifying second factor
High
CVE-2025-9636
pgadmin4 is affected by a Cross-Origin Opener Policy (COOP) vulnerability
Low
CVE-2025-58161
MobSF Path Traversal in GET /download/<filename> using absolute filenames
High
CVE-2025-6984
Langchain Community Vulnerable to XML External Entity (XXE) Attacks
Low
CVE-2025-57766
Fides' Admin UI User Password Change Does Not Invalidate Current Session
Medium
CVE-2025-57816
Fides Webserver API Rate Limiting Vulnerability in Proxied Environments
Low
CVE-2025-57815
Fides has a Lack of Brute-Force Protections on Authentication Endpoints
High
CVE-2025-11058
xml2rfc has an arbitrary file read vulnerability
High
CVE-2025-71344
Picklescan is missing detection when calling built-in python ensurepip._run_pip
High
CVE-2025-71361
Picklescan has a missing detection when calling built-in python idlelib.calltip.Calltip
High
CVE-2025-71358
Picklescan has a missing detection when calling built-in python idlelib.autocomplete.AutoComplete.get_entity
High
CVE-2025-71354
Picklescan has a missing detection when calling built-in python idlelib.debugobj.ObjectTreeItem
Low
CVE-2025-54080
Exiv2 Segmentation Faults in Exiv2::EpsImage::writeMetadata() via crafted EPS file
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.