Unrated
pysec-2024-55
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,855
Reset filters
Medium
ghsa-564j-v29w-rqr6
Khoj Open Redirect Vulnerability in Login Page
Low
ghsa-3v33-3wmw-3785
yt-dlp has dependency on potentially malicious third-party code in Douyu extractors
Medium
CVE-2024-3651
Internationalized Domain Names in Applications (IDNA) vulnerable to denial of service from specially crafted inputs to idna.encode
Low
CVE-2024-39689
Certifi removes GLOBALTRUST root certificate
Medium
CVE-2024-32498
OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access
Medium
CVE-2024-5062
A reflected Cross-Site Scripting (XSS) vulnerability was identified in zenml-io/zenml version 0.57.1. The vulnerability exists due to improper neutralization of input during web page generation, speci
High
CVE-2024-39705
ntlk unsafe deserialization vulnerability
Critical
CVE-2024-5980
pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint
Critical
CVE-2024-5826
vanna vulnerable to remote code execution caused by prompt injection
High
CVE-2024-6090
A path traversal vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240410, allowing any user to delete other users' chat histories. This vulnerability can also be exploited to delete any fi
High
CVE-2024-6038
A Regular Expression Denial of Service (ReDoS) vulnerability exists in the latest version of gaizhenbiao/chuanhuchatgpt. The vulnerability is located in the filter_history function within the utils.py
Critical
CVE-2024-5822
A Server-Side Request Forgery (SSRF) vulnerability exists in the upload processing interface of gaizhenbiao/ChuanhuChatGPT versions <= ChuanhuChatGPT-20240410-git.zip. This vulnerability allows attack
Medium
CVE-2023-49793
CodeChecker has a Path traversal in `CodeChecker server` in the endpoint of `CodeChecker store`
Critical
CVE-2024-5443
Remote Code Execution via path traversal bypass in lollms
Medium
CVE-2024-34693
Apache Superset server arbitrary file read
Medium
CVE-2024-38356
TinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable_regexp option
Medium
CVE-2024-38357
TinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elements
High
CVE-2024-38459
langchain_experimental (aka LangChain Experimental) before 0.0.61 for LangChain provides Python REPL access without an opt-in step. NOTE; this issue exists because of an incomplete fix for CVE-2024-27
Low
CVE-2024-25142
Apache Airflow does not return the "Cache-Control" header for dynamic content
Medium
ghsa-hjx6-f647-mvf9
Invenio-Communities has a Cross-Site Scripting (XSS) vulnerability in React components
Critical
CVE-2024-36265
** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Submarine Server Core.
Critical
CVE-2024-36264
** UNSUPPORTED WHEN ASSIGNED ** Improper Authentication vulnerability in Apache Submarine Commons Utils.
Critical
CVE-2024-4315
parisneo/lollms Local File Inclusion (LFI) attack
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.