Kritisch
CVE-2025-62515
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 1.334
Filter zurücksetzen
Kritisch
ghsa-m9mp-6x32-5rhg
scio is vunerable to Remote Command Execution through PyTorch
Kritisch
CVE-2025-10157
Picklescan is Vulnerable to Unsafe Globals Check Bypass through Subclass Imports
Hoch
CVE-2025-58757
Monai: Unsafe use of Pickle deserialization may lead to RCE
Hoch
CVE-2025-58755
MONAI does not prevent path traversal, potentially leading to arbitrary file writes
Kritisch
CVE-2025-58438
internetarchive Vulnerable to Directory Traversal in File.download()
Kritisch
ghsa-58p5-r2f6-g2cj
Pixar OpenUSD Sdf_PathNode Module Use-After-Free Vulnerability Leading to Potential Remote Code Execution
Kritisch
CVE-2025-58367
DeepDiff Class Pollution in Delta class leading to DoS, Remote Code Execution, and more
Mittel
CVE-2025-71364
Picklescan is missing detection when calling built-in python library asyncio.unix_events._UnixSubprocessTransport._start
Hoch
CVE-2025-57760
Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation (Post-RCE)
Niedrig
ghsa-674p-xv2x-rf3g
Litestar has potential log injection in exception logging
Mittel
ghsa-r54c-2xmf-2cf3
MS SWIFT Deserialization RCE Vulnerability
Hoch
CVE-2024-5187
onnx allows Arbitrary File Overwrite in download_model_with_test_data
Hoch
CVE-2025-53528
Cadwyn vulnerable to XSS on the docs page
Hoch
CVE-2025-47782
motionEye vulnerable to RCE in add_camera Function Due to unsafe command execution
Niedrig
CVE-2025-44021
OpenStack Ironic before 29.0.1 can write unintended files to a target node disk during image handling (if a deployment was performed via the API). A malicious project assigned as a node owner can prov
Mittel
CVE-2025-24887
OpenCTI is an open-source cyber threat intelligence platform. In versions starting from 6.4.8 to before 6.4.10, the allow/deny lists can be bypassed, allowing a user to change attributes that are inte
Hoch
ghsa-22fp-mf44-f2mq
youtube-dl vulnerable to file system modification and RCE through improper file-extension sanitization
Kritisch
CVE-2025-32428
TigerVNC accessible via the network and not just via a UNIX socket as intended
Kritisch
CVE-2025-32013
LNbits Lightning Network Payment System Vulnerable to Server-Side Request Forgery via LNURL Authentication Callback
Mittel
CVE-2025-31116
Mobile Security Framework (MobSF) has a SSRF Vulnerability fix bypass on assetlinks_check with DNS Rebinding
Hoch
CVE-2024-8616
H2O Vulnerable to Arbitrary File Overwrite
Kritisch
CVE-2024-7776
A vulnerability in the `download_model` function of the onnx/onnx framework, before and including version 1.16.1, allows for arbitrary file overwrite due to inadequate prevention of path traversal att
Hoch
CVE-2024-6854
H2O Vulnerable to Arbitrary File Overwrite via File Export
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.