High
CVE-2025-48956
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
High
CVE-2025-57751
Denial-of-Service attack in pyLoad CNL Blueprint using dukpy.evaljs
Medium
CVE-2025-57804
h2 allows HTTP Request Smuggling due to illegal characters in headers
Medium
CVE-2025-54791
OMERO.web displays unecessary user information when requesting password reset
Medium
CVE-2025-55214
Copier's safe template has filesystem write access outside destination path
High
CVE-2025-9141
vLLM has remote code execution vulnerability in the tool call parser for Qwen3-Coder
High
CVE-2025-55201
Copier's safe template has arbitrary filesystem read/write access
Medium
CVE-2025-55197
PyPDF's Manipulated FlateDecode streams can exhaust RAM
Medium
CVE-2025-5197
Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability
Medium
CVE-2025-55149
TinyScientist has Path Traversal Vulnerability in PDF Review Function (CWE-22)
High
CVE-2025-71325
Picklescan has pickle parsing logic flaw that leads to malicious pickle file bypass
Medium
CVE-2025-54368
uv allows ZIP payload obfuscation through parsing differentials
High
CVE-2025-54886
SKOPS Card.get_model happily allows arbitrary code execution
High
CVE-2025-55156
PyLoad vulnerable to SQL Injection via API /json/add_package in add_links parameter
High
CVE-2025-54796
copyparty allows Regex Denial of Service (ReDoS) in the upload listing
Medium
CVE-2025-53012
MaterialX Lack of MTLX Import Depth Limit Leads to DoS (Denial-Of-Service) Via Stack Exhaustion
Medium
CVE-2025-53009
MaterialX Stack Overflow via Lack of MTLX XML Parsing Recursion Limit
Medium
CVE-2025-54952
ExecuTorch integer overflow vulnerability leads to code execution
High
CVE-2025-54433
Bugsink path traversal via event_id in ingestion
Medium
CVE-2025-54423
copyparty has DOM-Based XSS vulnerability when displaying multimedia metadata
Medium
CVE-2025-54589
copyparty Reflected XSS via Filter Parameter
Low
CVE-2025-50460
MS SWIFT Remote Code Execution via unsafe PyYAML deserialization
Medium
CVE-2025-41419
MS SWIFT WEB-UI RCE Vulnerability
Medium
CVE-2025-48074
OpenEXR Out-Of-Memory via Unbounded File Header Values
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.