Medium
CVE-2024-39125
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,855
Reset filters
Medium
CVE-2024-39126
Roundup before 2.4.0 allows XSS via JavaScript in PDF, XML, and SVG documents.
Medium
CVE-2024-39124
In Roundup before 2.4.0, classhelpers (_generic.help.html) allow XSS.
Medium
ghsa-vhmj-5q9r-mm9g
BlastRADIUS also affects eduMFA
High
CVE-2024-31411
Unrestricted Upload of File with dangerous type vulnerability in Apache StreamPipes.
Medium
CVE-2024-31979
Server-Side Request Forgery (SSRF) vulnerability in Apache StreamPipes during installation process of pipeline elements.
Low
CVE-2024-30471
Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache StreamPipes in user self-registration.
High
CVE-2024-39877
Apache Airflow has DAG Author Code Execution possibility in airflow-scheduler
Medium
CVE-2024-39863
Apache Airflow Potential Cross-site Scripting Vulnerability
Low
CVE-2024-40637
dbt has an implicit override for built-in materializations from installed packages
Critical
ghsa-q5fm-55c2-v6j9
Fiona affected by CVE-2023-45853 related to MiniZip madler-zlib
High
ghsa-g4m4-9q4c-mfw6
Fiona affected by CVE-2020-14152 related to madler-zlib
Critical
CVE-2024-39700
JupyterLab extension template is a `copier` template for JupyterLab extensions. Repositories created using this template with `test` option include `update-integration-tests.yml` workflow which has a
Medium
CVE-2024-39887
Apache Superset vulnerable to improper SQL authorization
Critical
CVE-2024-21513
Versions of the package langchain-experimental from 0.0.15 and before 0.0.21 are vulnerable to Arbitrary Code Execution when retrieving values from the database, the code will attempt to call 'eval' o
High
ghsa-5grr-72f9-678v
Malware package cipherbcrypt
High
CVE-2024-39317
Wagtail regular expression denial-of-service via search query parsing
Medium
CVE-2024-6035
A Stored Cross-Site Scripting (XSS) vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240410. This vulnerability allows an attacker to inject malicious JavaScript code into the chat history
Critical
CVE-2024-6037
A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows an attacker to create arbitrary folders at any location on the server, including the root directory (C: dir). This can lead to unc
Critical
CVE-2024-6036
A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows any user to restart the server at will by sending a specific request to the `/queue/join?` endpoint with `"fn_index":66`. This unr
High
CVE-2024-39614
Django vulnerable to Denial of Service
High
CVE-2024-39330
Django Path Traversal vulnerability
Medium
CVE-2024-39329
Django vulnerable to user enumeration attack
High
CVE-2024-38875
Django vulnerable to Denial of Service
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.