Medium
CVE-2025-71368
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2025-71340
Picklescan is missing detection when calling built-in python idlelib.pyshell.ModifiedInterpreter.runcode
Medium
CVE-2025-71342
Picklescan is missing detection when calling built-in python idlelib.run.Executive.runcode
Medium
CVE-2025-71343
Picklescan is missing detection when calling built-in python lib2to3.pgen2.pgen.ParserGenerator.make_label
High
CVE-2025-52353
Badaso CMS file upload vulnerability
Medium
CVE-2025-71345
Picklescan is missing detection when calling pytorch function torch.utils.bottleneck.__main__.run_autograd_prof
Medium
ghsa-224p-v68g-5g8f
GraphQL Armor Max-Depth Plugin Bypass via fragment caching
Medium
ghsa-hmfr-rx46-4jx2
GraphQL Armor Max-Depth Plugin Bypass via Introspection Query Obfuscation
Medium
CVE-2025-71360
Picklescan has a missing detection when calling built-in python library idlelib.calltip.get_entity
Medium
CVE-2025-71371
Picklescan has a missing detection when calling built-in python code.InteractiveInterpreter
Medium
CVE-2025-71359
Picklescan has a missing detection when calling built-in python lib2to3.pgen2.grammar.Grammar.loads
Medium
CVE-2025-71374
Picklescan has a missing detection when calling built-in python profile.Profile.run
Medium
CVE-2025-71352
Picklescan has a missing detection when calling built-in python trace.Trace.runctx
Medium
CVE-2025-71349
Picklescan has a missing detection when calling built-in python trace.Trace.run
High
CVE-2025-57810
jsPDF Denial of Service (DoS)
High
CVE-2025-57803
ImageMagick (WriteBMPImage): 32-bit integer overflow when writing BMP scanline stride → heap buffer overflow
High
CVE-2025-55298
ImageMagick has a Format String Bug in InterpretImageFilename leads to arbitrary code execution
Low
CVE-2025-55212
ImageMagick affected by divide-by-zero in ThumbnailImage via montage -geometry ":" leads to crash
Medium
CVE-2025-7732
Lazy Load for Videos <= 2.18.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via data-video-title and href Attributes
Medium
CVE-2025-8490
All-in-One WP Migration and Backup <= 7.97 - Authenticated (Administrator+) Stored Cross-Site Scripting via Import
Medium
CVE-2025-9277
SiteSEO – SEO Simplified <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Broken Regex Expression
Medium
CVE-2025-50383
Easy!Appointments SQL injection vulnerability
High
CVE-2025-54029
WooCommerce csv import export <= 2.0.6 - Authenticated (Subscriber+) Arbitrary File Deletion
Medium
CVE-2025-54714
Zephyr Project Manager <= 3.3.201 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.