Low
CVE-2024-47813
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,855
Reset filters
Medium
CVE-2024-47763
Wasmtime is an open source runtime for WebAssembly. Wasmtime's implementation of WebAssembly tail calls combined with stack traces can result in a runtime crash in certain WebAssembly modules. The run
High
CVE-2024-43497
DeepSpeed Remote Code Execution Vulnerability
Low
CVE-2024-45231
Django allows enumeration of user e-mail addresses
Medium
CVE-2024-45230
An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16. The urlize() and urlizetrunc() template filters are subject to a potential denial-of-service attack via ver
High
CVE-2024-46977
OpenC3 Path Traversal via screen controller (`GHSL-2024-127`)
Medium
CVE-2024-47529
OpenC3 stores passwords in clear text (`GHSL-2024-129`)
Medium
CVE-2024-43795
OpenC3 Cross-site Scripting in Login functionality (`GHSL-2024-128`)
Medium
ghsa-vx3h-qwqw-r2wq
Inventree Server-Side Request Forgery vulnerability exposes server port/internal IP
High
CVE-2024-47532
RestrictedPython information leakage via `AttributeError.obj` and the `string` module
Medium
CVE-2024-46632
Assimp v5.4.3 is vulnerable to Buffer Overflow via the MD5Importer::LoadMD5MeshFile function.
High
CVE-2024-1728
Gradio allows users to access arbitrary files
High
CVE-2024-46488
Heap-based Buffer Overflow in sqlite-vec
Medium
CVE-2024-47082
Cross-Site Request Forgery (CSRF) in strawberry-graphql
High
CVE-2024-22893
OpenSlides 4.0.15 verifies passwords by comparing password hashes using a function with content-dependent runtime. This can allow attackers to obtain information about the password hash using a timing
High
CVE-2024-22892
OpenSlides 4.0.15 was discovered to be using a weak hashing algorithm to store passwords.
Medium
CVE-2024-47226
A stored cross-site scripting (XSS) vulnerability exists in NetBox 4.1.0 within the "Configuration History" feature of the "Admin" panel via a /core/config-revisions/ Add action. An authenticated user
Medium
CVE-2024-42346
Galaxy is a free, open-source system for analyzing data, authoring workflows, training and education, publishing tools, managing infrastructure, and more. The editor visualization, /visualizations end
Medium
CVE-2024-8375
Reverb use after free vulnerability
Critical
CVE-2024-46946
LangChain Experimental Eval Injection vulnerability
High
CVE-2024-8946
A vulnerability was found in MicroPython 1.23.0. It has been classified as critical. Affected is the function mp_vfs_umount of the file extmod/vfs.c of the component VFS Unmount Handler. The manipulat
High
CVE-2024-8947
A vulnerability was found in MicroPython 1.22.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file py/objarray.c. The manipulation leads to use a
High
CVE-2024-8948
A vulnerability was found in MicroPython 1.23.0. It has been rated as critical. Affected by this issue is the function mpz_as_bytes of the file py/objint.c. The manipulation leads to heap-based buffer
Medium
CVE-2024-5998
LangChain pickle deserialization of untrusted data
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.