Medium
CVE-2024-47529
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 427
Reset filters
Medium
CVE-2024-43795
OpenC3 Cross-site Scripting in Login functionality (`GHSL-2024-128`)
Medium
CVE-2024-14029
Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') in tornado
Medium
CVE-2024-3099
Undefined Behavior in mlflow
Critical
CVE-2024-3955
CraftBeerPi 4 allows arbitrary code execution
Medium
CVE-2024-32481
vyper's range(start, start + N) reverts for negative numbers
High
CVE-2024-31583
Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp.
Medium
CVE-2024-27305
aiosmtpd vulnerable to SMTP smuggling
High
CVE-2024-21502
Versions of the package fastecdsa before 2.3.2 are vulnerable to Use of Uninitialized Variable on the stack, via the curvemath_mul function in src/curveMath.c, due to being used and interpreted as use
High
CVE-2024-22190
Untrusted search path under some conditions on Windows allows arbitrary code execution
Medium
CVE-2023-52306
PaddlePaddle floating point exception in paddle.lerp
Medium
ghsa-rqr8-pxh7-cq3g
Ethereum ABI decoder DoS when parsing ZST
Medium
CVE-2023-47627
AIOHTTP has problems in HTTP parser (the python one, not llhttp)
Low
CVE-2023-47641
Aiohttp has inconsistent interpretation of `Content-Length` vs. `Transfer-Encoding` differing in C and Python fallbacks
Critical
CVE-2023-47128
piccolo SQL Injection via named transaction savepoints
Medium
CVE-2023-54397
Tornado vulnerable to HTTP request smuggling via improper parsing of `Content-Length` fields and chunk lengths
Medium
CVE-2023-37276
aiohttp.web.Application vulnerable to HTTP request smuggling via llhttp HTTP request parser
High
CVE-2023-37271
RestrictedPython vulnerable to arbitrary code execution via stack frame sandbox escape
Unrated
CVE-2023-37360
pacparser_find_proxy in Pacparser before 1.4.2 allows JavaScript injection, and possibly privilege escalation, when the attacker controls the URL (which may be realistic within enterprise security pro
High
CVE-2023-30628
Kiwi TCMS is an open source test management system. In kiwitcms/Kiwi v12.2 and prior and kiwitcms/enterprise v12.2 and prior,
High
CVE-2022-41894
Buffer overflow in `CONV_3D_TRANSPOSE` on TFLite
Medium
CVE-2022-41886
Overflow in `ImageProjectiveTransformV2`
High
CVE-2022-45199
Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL.
High
CVE-2022-43281
wasm-interp v1.0.29 was discovered to contain a heap overflow via the component std::vector<wabt::Type, std::allocator<wabt::Type>>::size() at /bits/stl_vector.h.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.