High
CVE-2025-25295
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,405
High
CVE-2025-24359
ASTEVAL Allows Maliciously Crafted Format Strings to Lead to Sandbox Escape
High
CVE-2025-23205
nbgrader's `frame-ancestors: self` grants all users access to formgrader
High
CVE-2025-24803
MobSF Stored Cross-Site Scripting (XSS)
High
CVE-2025-24805
MobSF Local Privilege Escalation
High
CVE-2025-23217
Mitmweb API Authentication Bypass Using Proxy Server
High
CVE-2025-22153
try/except* clauses could allow bypass RestrictedPython via type confusion bug in the CPython interpreter
Low
CVE-2025-22151
Strawberry GraphQL has type resolution vulnerability in node interface that allows potential data leakage through incorrect type resolution
Low
CVE-2024-53995
GHSL-2024-288: SickChill open redirect in login
Medium
CVE-2024-50633
Indico Insecure Access
High
CVE-2024-56509
changedetection.io Vulnerable to Improper Input Validation Leading to LFR/Path Traversal
High
CVE-2023-1907
pgAdmin has Incorrect Default Permissions
High
CVE-2025-21618
NiceGUI On Air authentication issue
High
CVE-2024-39025
Letta (previously MemGPT) incorrect access control vulnerability
Medium
CVE-2024-52294
khoj has an IDOR in subscription management allows unauthorized subscription modifications
Low
CVE-2024-45033
Apache Airflow Fab Provider Insufficient Session Expiration vulnerability
Low
CVE-2024-55655
sigstore has insufficient validation of integration timestamp during verification
Medium
CVE-2024-9774
python-sql SQL injection vulnerability
Medium
CVE-2024-56142
PGHoard Path Traversal vulnerability
High
CVE-2024-55587
python-libarchive directory traversal
High
CVE-2024-12745
Amazon Redshift Python Connector vulnerable to SQL Injection
Medium
CVE-2024-9427
Koji Cross-site Scripting
High
CVE-2024-56327
pyrage vulnerable to malicious plugin names, recipients, or identities causing arbitrary binary execution
Medium
CVE-2024-56201
Jinja has a sandbox breakout through malicious filenames
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.