Medium
CVE-2024-45805
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,358
Reset filters
High
CVE-2024-21543
Versions of the package djoser before 2.3.0 are vulnerable to Authentication Bypass when the authenticate() function fails. This is because the system falls back to querying the database directly, gra
High
CVE-2024-45404
OpenCTI is an open-source cyber threat intelligence platform. In versions below 6.2.18, because the function to limit the rate of OTP does not exist, an attacker with valid credentials or a malicious
High
pysec-2024-154
A number of releases of ultralytics contained malicious crypto miner software.
Critical
CVE-2024-53947
Apache Superset: Improper SQL authorisation, parse not checking for specific postgres functions
Medium
CVE-2024-53948
Apache Superset: Error verbosity exposes metadata in analytics databases
Medium
CVE-2024-53907
Django denial-of-service in django.utils.html.strip_tags()
Medium
CVE-2024-37303
Synapse's unauthenticated writes to the media repository allow planting of problematic content
High
CVE-2024-37302
Synapse denial of service through media disk space consumption
High
CVE-2024-54000
MobSF vulnerability allows SSRF due to the allow_redirects=True parameter
High
ghsa-486g-47cc-8wxf
aiocpa contains credential harvesting code
Unrated
pysec-2024-152
aiocpa 0.1.13 contains credential harvesting code
High
CVE-2024-27134
Excessive directory permissions in MLflow leads to local privilege escalation when using spark_udf. This behavior can be exploited by a local attacker to gain elevated permissions by using a ToCToU at
Medium
CVE-2024-53253
Sentry improper error handling leaks Application Integration Client Secret
Medium
CVE-2024-53425
A heap-buffer-overflow vulnerability was discovered in the SkipSpacesAndLineEnd function in Assimp v5.4.3. This issue occurs when processing certain malformed MD5 model files, leading to an out-of-bou
High
CVE-2024-52581
Litestar allows unbounded resource consumption (DoS vulnerability)
Critical
CVE-2024-47533
cobbler allows anyone to connect to cobbler XML-RPC server with known password and make changes
Medium
CVE-2024-37155
OpenCTI May Bypass Introspection Restriction
High
CVE-2024-45784
Apache Airflow: Sensitive configuration values are not masked in the logs by default
High
CVE-2024-27530
wasm3 139076a contains a Use-After-Free in ForEachModule.
Medium
CVE-2024-27529
wasm3 uncontrolled memory allocation vulnerability
Medium
CVE-2024-51751
Gradio vulnerable to arbitrary file read with File and UploadButton components
Critical
CVE-2024-10081
codechecker vulnerable to authentication bypass when using specifically crafted URLs
Critical
CVE-2024-10082
codechecker authentication method confusion vulnerability allows logging in as the built-in root user from an external service
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.