Low
CVE-2025-57815
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,436
High
CVE-2025-11058
xml2rfc has an arbitrary file read vulnerability
High
CVE-2025-71344
Picklescan is missing detection when calling built-in python ensurepip._run_pip
High
CVE-2025-71361
Picklescan has a missing detection when calling built-in python idlelib.calltip.Calltip
High
CVE-2025-71358
Picklescan has a missing detection when calling built-in python idlelib.autocomplete.AutoComplete.get_entity
High
CVE-2025-71354
Picklescan has a missing detection when calling built-in python idlelib.debugobj.ObjectTreeItem
Low
CVE-2025-54080
Exiv2 Segmentation Faults in Exiv2::EpsImage::writeMetadata() via crafted EPS file
Low
CVE-2025-55304
Exiv2 has quadratic performance in ICC profile parsing in JpegBase::readMetadata
Medium
CVE-2025-58162
MobSF Vulnerable to Arbitrary File Write (AR-Slip) via Absolute Path in .a Extraction
High
CVE-2025-57808
ESP-IDF web_server basic auth bypass using empty or incomplete Authorization header
Medium
CVE-2025-58068
Eventlet affected by HTTP request smuggling in unparsed trailers
High
CVE-2025-5302
LlamaIndex affected by a Denial of Service (DOS) in JSONReader
Medium
CVE-2025-55673
Apache Superset data query improperly discloses database schema information to low-privileged guest user
Medium
CVE-2025-55675
Apache Superset allows authenticated users to discover metadata about datasources they don't have permission to access
High
CVE-2025-57809
XGrammar affected by Denial of Service by infinite recursion grammars
High
CVE-2025-48956
vllm API endpoints vulnerable to Denial of Service Attacks
High
CVE-2025-57751
Denial-of-Service attack in pyLoad CNL Blueprint using dukpy.evaljs
Medium
CVE-2025-57804
h2 allows HTTP Request Smuggling due to illegal characters in headers
Medium
CVE-2025-54791
OMERO.web displays unecessary user information when requesting password reset
Medium
CVE-2025-55214
Copier's safe template has filesystem write access outside destination path
High
CVE-2025-9141
vLLM has remote code execution vulnerability in the tool call parser for Qwen3-Coder
High
CVE-2025-55201
Copier's safe template has arbitrary filesystem read/write access
Medium
CVE-2025-55197
PyPDF's Manipulated FlateDecode streams can exhaust RAM
Medium
CVE-2025-5197
Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.