Medium
CVE-2024-51493
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,358
Reset filters
Critical
CVE-2024-51734
Access control vulnerable to user data deletion by anonynmous users
Critical
CVE-2024-42835
langflow v1.0.12 was discovered to contain a remote code execution (RCE) vulnerability via the PythonCodeTool component.
Critical
CVE-2024-6581
A vulnerability in the discussion image upload function of the Lollms application, version v9.9, allows for the uploading of SVG files. Due to incomplete filtering in the sanitize_svg function, this c
High
CVE-2024-49769
Waitress vulnerable to DoS leading to high CPU usage/resource exhaustion
Critical
CVE-2024-49768
Waitress has request processing race condition in HTTP pipelining with invalid first request
High
CVE-2024-7807
A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240628 allows for a Denial of Service (DOS) attack. When uploading a file, if an attacker appends a large number of characters to the end of a m
Medium
CVE-2024-8143
In the latest version (20240628) of gaizhenbiao/chuanhuchatgpt, an issue exists in the /file endpoint that allows authenticated users to access the chat history of other users. When a user logs in, a
High
CVE-2024-7962
An arbitrary file read vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240628 due to insufficient validation when loading prompt template files. An attacker can read any file that matches
High
CVE-2024-47821
pyLoad vulnerable to remote code execution by download to /.pyload/scripts using /flashgot API
Medium
CVE-2024-49750
The Snowflake Connector for Python stores sensitive data in logs
High
ghsa-3vpc-4p9p-47hc
curl_cffi bundles a version of libcurl affected by High Severity vulnerability
Medium
CVE-2024-47872
Gradio has an XSS on every Gradio server via upload of HTML files, JS files, or SVG files
Medium
CVE-2024-47868
Gradio has several components with post-process steps allow arbitrary file leaks
High
CVE-2024-47867
Gradio lacks integrity checking on the downloaded FRP client
Medium
CVE-2024-47167
Gradio vulnerable to SSRF in the path parameter of /queue/join
Medium
CVE-2024-47164
Gradio's `is_in_or_equal` function may be bypassed
High
CVE-2024-47084
Gradios's CORS origin validation is not performed when the request has a cookie
Low
ghsa-26jh-r8g2-6fpr
Gradio's dropdown component pre-process step does not limit the values to those in the dropdown list
Medium
CVE-2024-47833
Taipy has a Session Cookie without Secure and HTTPOnly flags
Low
CVE-2024-47813
Wasmtime is an open source runtime for WebAssembly. Under certain concurrent event orderings, a `wasmtime::Engine`'s internal type registry was susceptible to double-unregistration bugs due to a race
Medium
CVE-2024-47763
Wasmtime is an open source runtime for WebAssembly. Wasmtime's implementation of WebAssembly tail calls combined with stack traces can result in a runtime crash in certain WebAssembly modules. The run
Low
CVE-2024-45231
Django allows enumeration of user e-mail addresses
Medium
CVE-2024-43795
OpenC3 Cross-site Scripting in Login functionality (`GHSL-2024-128`)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.