High
CVE-2025-14930
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2025-14928
Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hu
High
CVE-2025-14929
Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on af
High
CVE-2025-14926
Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Huggi
High
CVE-2025-14927
Hugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hug
High
CVE-2025-14920
Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected instal
High
CVE-2025-14921
Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected i
High
CVE-2025-14924
Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installa
High
CVE-2025-68665
LangChain serialization injection vulnerability enables secret extraction
High
CVE-2025-51511
Cadmium CMS has a background arbitrary file upload vulnerability
Medium
CVE-2025-68614
LibreNMS Alert Rule API Cross-Site Scripting Vulnerability
Critical
CVE-2025-13773
Print Invoice & Delivery Notes for WooCommerce <= 5.8.0 - Unauthenticated Remote Code Execution
Medium
CVE-2025-68595
Widgets for Social Photo Feed <= 1.7.8 - Missing Authorization
High
CVE-2025-68546
Nika <= 1.2.14 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-68544
Diza <= 1.3.15 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-67467
GiveWP <= 4.13.1 - Cross-Site Request Forgery
Medium
CVE-2025-68551
VPSUForm <= 3.2.24 - Authenticated (Contributor+) Information Exposure
Medium
CVE-2025-68508
Brave <= 0.8.3 - Missing Authorization
Medium
CVE-2026-22342
Dating <= 11.2.0 - Cross-Site Request Forgery
Medium
CVE-2025-68556
HAPPY <= 1.0.9 - Missing Authorization
Medium
CVE-2025-68994
Product Loops for WooCommerce <= 2.1.2 - Missing Authorization
Critical
CVE-2025-14829
e-xact-hosted-payment <= 2.0 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2025-68548
Responsive Posts Carousel Pro <= 15.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-68550
WPBulky <= 1.1.13 - Authenticated (Author+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.