CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

13507 matches found

osv_ubuntu•added 2025/10/06 11:15 p.m.•22 views

UBUNTU-CVE-2025-61774

PyVista provides 3D plotting and mesh analysis through an interface for the Visualization Toolkit VTK. Version 0.46.3 of the PyVista Project is vulnerable to remote code execution via dependency confusion. Two pieces of code use--extra-index-url. But when --extra-index-url is used, pip always...

9.3CVSS6.3AI score0.00649EPSS

SaveExploits0References6

CVE•added 2025/10/06 10:14 p.m.•78 views

CVE-2025-61774

CVE-2025-61774 affects PyVista 0.46.3 and enables remote code execution through dependency confusion using pip --extra-index-url. The description notes that two code paths use --extra-index-url, and pip may fetch a higher-version package from a non-PyPI index if one package listed is not publishe...

9.3CVSS6.3AI score0.00649EPSS

SaveExploits0References4

OSSF Malicious Packages•added 2025/10/06 10:53 a.m.•17 views

Malicious code in gnosis-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 42112b8b2e7c96d9c3a5a188bebf3539cba140ccfdcc721ea9952259b8893721 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

7.3AI score

SaveExploits0References1

osv_mal•added 2025/10/06 10:53 a.m.•34 views

MAL-2025-191740 Malicious code in gnosis-py (PyPI)

7.2AI score

SaveExploits0References1

Positive Technologies•added 2025/10/06 12:00 a.m.•27 views

PT-2025-40952

Name of the Vulnerable Software and Affected Versions PyVista version 0.46.3 Description PyVista, a software for 3D plotting and mesh analysis using the Visualization Toolkit VTK, is susceptible to remote code execution through a dependency confusion issue. The software’s use of the...

9.3CVSS6.4AI score0.00649EPSS

SaveExploits0References10