Medium
CVE-2025-53009
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,405
Medium
CVE-2025-54952
ExecuTorch integer overflow vulnerability leads to code execution
High
CVE-2025-54433
Bugsink path traversal via event_id in ingestion
Medium
CVE-2025-54423
copyparty has DOM-Based XSS vulnerability when displaying multimedia metadata
Medium
CVE-2025-54589
copyparty Reflected XSS via Filter Parameter
Low
CVE-2025-50460
MS SWIFT Remote Code Execution via unsafe PyYAML deserialization
Medium
CVE-2025-41419
MS SWIFT WEB-UI RCE Vulnerability
Medium
CVE-2025-48074
OpenEXR Out-Of-Memory via Unbounded File Header Values
High
CVE-2025-48071
OpenEXR Heap-Based Buffer Overflow in Deep Scanline Parsing via Forged Unpacked Size
Medium
CVE-2025-48072
OpenEXR Out of Bounds Heap Read due to Bad Pointer Arithmetic in LossyDctDecoder_execute
Medium
CVE-2025-48073
OpenEXR ScanLineProcess::run_fill NULL Pointer Write In "reduceMemory" Mode
Low
CVE-2025-53011
MaterialX Null Pointer Dereference in MaterialXCore Shader Generation due to Unchecked implGraphOutput
Low
CVE-2025-53010
MaterialX Null Pointer Dereference in getShaderNodes due to Unchecked nodeGraph->getOutput return
Medium
CVE-2025-54121
Starlette has possible denial-of-service vector when parsing large files in multipart forms
High
CVE-2025-54412
Skops has Inconsistent Trusted Type Validation that Enables Hidden `operator` Methods Execution
High
CVE-2025-54413
Skops may allow MethodNode to access unexpected object fields through dot notation, leading to arbitrary code execution at load time
High
CVE-2025-54140
`pyLoad` has Path Traversal Vulnerability in `json/upload` Endpoint that allows Arbitrary File Write
High
CVE-2025-54365
FastAPI Guard has a regex bypass
High
CVE-2025-6998
Calibre Web and Autocaliweb have a ReDoS vulnerability
Medium
CVE-2025-7404
Calibre Web and Autocaliweb have OS Command Injection vulnerability
Medium
CVE-2025-55013
Assemblyline 4 service client vulnerable to Arbitrary Write through path traversal in Client code
Low
CVE-2025-53643
AIOHTTP is vulnerable to HTTP Request/Response Smuggling through incorrect parsing of chunked trailer sections
Medium
CVE-2025-51464
Aim vulnerable to Cross-site Scripting
Medium
CVE-2025-6211
LlamaIndex vulnerable to data loss through hash collisions in its DocugamiReader class
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.