Low
CVE-2025-43863
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,855
Reset filters
Low
CVE-2025-43866
Vantage6 Server JWT secret not cryptographically secure
High
CVE-2025-49142
Nautobot is a Network Source of Truth and Network Automation Platform. All users of Nautobot versions prior to 2.4.10 or prior to 1.6.32 are potentially affected. Due to insufficient security configur
Critical
CVE-2025-49652
BackendAI Missing Authentication for Critical Function
Medium
CVE-2025-48432
Django Improper Output Neutralization for Logs vulnerability
Critical
CVE-2025-1750
LlamaIndex DuckDBVectorStore vulnerable to SQL injection through ref_doc_id
Medium
CVE-2018-25111
django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask(0) in models.py.
Medium
CVE-2025-48943
vLLM allows clients to crash the openai server with invalid regex
Medium
CVE-2025-48942
vLLM DOS: Remotely kill vllm over http with invalid JSON schema
Medium
CVE-2025-48887
vLLM has a Regular Expression Denial of Service (ReDoS, Exponential Complexity) Vulnerability in `pythonic_tool_parser.py`
High
CVE-2025-48912
Apache Superset: Improper authorization bypass on row level security via SQL Injection
Medium
CVE-2025-48889
Gradio Allows Unauthorized File Copy via Path Manipulation
Low
CVE-2025-46570
Potential Timing Side-Channel Vulnerability in vLLM’s Chunk-Based Prefix Caching
Medium
CVE-2025-46722
vLLM has a Weakness in MultiModalHasher Image Hashing Implementation
Medium
ghsa-94v7-wxj6-r2q5
multicast in source builds from vulnerable setuptools dependency
Medium
CVE-2025-71379
vLLM vulnerable to Regular Expression Denial of Service
High
CVE-2025-1753
LLama-Index CLI OS command injection vulnerability
Medium
CVE-2025-5175
A vulnerability was found in erdogant pypickle up to 1.1.5. It has been classified as critical. This affects the function Save of the file pypickle/pypickle.py. The manipulation leads to improper auth
High
CVE-2025-5174
A vulnerability was found in erdogant pypickle up to 1.1.5 and classified as problematic. Affected by this issue is the function load of the file pypickle/pypickle.py. The manipulation leads to deseri
Medium
CVE-2025-5169
A vulnerability classified as problematic has been found in Open Asset Import Library Assimp 5.4.3. This affects the function MDLImporter::InternReadFile_3DGS_MDL345 of the file assimp/code/AssetLib/M
Medium
CVE-2025-5168
A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been rated as problematic. Affected by this issue is the function MDLImporter::ImportUVCoordinate_3DGS_MDL345 of the file as
Medium
CVE-2025-5167
A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been declared as problematic. Affected by this vulnerability is the function LWOImporter::GetS0 in the library assimp/code/A
Medium
CVE-2025-5166
A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as problematic. Affected is the function MDCImporter::InternReadFile of the file assimp/code/AssetLib/MDC/MD
Medium
CVE-2025-5165
A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This issue affects the function MDCImporter::ValidateSurfaceHeader of the file assimp/code/AssetLib/M
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.