High
CVE-2025-62727
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,343
Reset filters
Medium
CVE-2025-62801
FastMCP vulnerable to windows command injection in FastMCP Cursor installer via server_name
Medium
CVE-2025-62800
FastMCP vulnerable to reflected XSS in client's callback page
High
CVE-2025-62611
aiomysql allows arbitrary access to client files through vulnerability of a malicious MySQL server
High
CVE-2025-61773
pyLoad CNL and captcha handlers allow Code Injection via unsanitized parameters
Medium
CVE-2025-61911
python-ldap has sanitization bypass in ldap.filter.escape_filter_chars
Medium
CVE-2025-62706
Authlib : JWE zip=DEF decompression bomb enables DoS
Low
CVE-2025-59682
Django vulnerable to partial directory traversal via archives
Medium
CVE-2025-8406
ZenML is vulnerable to Path Traversal through its `PathMaterializer` class
Medium
CVE-2025-57275
SPDK is vulnerable to buffer overflow in the NVMe-oF target component
High
CVE-2025-59152
Litestar X-Forwarded-For Header Spoofing Vulnerability Enables Rate Limit Evasion
High
CVE-2025-6242
vLLM is vulnerable to Server-Side Request Forgery (SSRF) through `MediaConnector` class
High
CVE-2025-61784
LLaMA Factory's Chat API Contains Critical SSRF and LFI Vulnerabilities
Low
CVE-2025-59842
JupyterLab LaTeX typesetter links did not enforce `noopener` attribute
Medium
CVE-2025-8869
pip's fallback tar extraction doesn't check symbolic links point to extraction directory
High
CVE-2025-7647
llama-index-core insecurely handles temporary files
High
CVE-2025-58180
OctoPrint is Vulnerable to RCE Attacks via Unsanitized Filename in File Upload
Low
CVE-2025-58161
MobSF Path Traversal in GET /download/<filename> using absolute filenames
Low
CVE-2025-57815
Fides has a Lack of Brute-Force Protections on Authentication Endpoints
Low
CVE-2025-54080
Exiv2 Segmentation Faults in Exiv2::EpsImage::writeMetadata() via crafted EPS file
Medium
CVE-2025-58162
MobSF Vulnerable to Arbitrary File Write (AR-Slip) via Absolute Path in .a Extraction
Medium
CVE-2025-58068
Eventlet affected by HTTP request smuggling in unparsed trailers
High
CVE-2025-57751
Denial-of-Service attack in pyLoad CNL Blueprint using dukpy.evaljs
Medium
CVE-2025-55149
TinyScientist has Path Traversal Vulnerability in PDF Review Function (CWE-22)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.