High
CVE-2024-4216
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 738
Reset filters
Low
CVE-2024-3568
Transformers Deserialization of Untrusted Data vulnerability
High
CVE-2024-30248
Piccolo Admin's raw SVG loading may lead to complete data compromise from admin page
High
CVE-2024-29640
aliyundrive-webdav vulnerable to Command Injection
Medium
CVE-2024-1455
LangChain's XMLOutputParser vulnerable to XML Entity Expansion
High
CVE-2024-29019
ESPHome vulnerable to Authentication bypass via Cross site request forgery
Medium
CVE-2024-29032
`qiskit_ibm_runtime.RuntimeDecoder` can execute arbitrary code
Medium
CVE-2024-28102
JWCrypto vulnerable to JWT bomb Attack in `deserialize` function
Medium
CVE-2024-27287
esphome vulnerable to stored Cross-site Scripting in edit configuration file API
High
CVE-2024-27081
ESPHome vulnerable to remote code execution via arbitrary file write
Medium
CVE-2024-2319
Django MarkdownX Cross-Site Scripting (XSS) vulnerability
High
CVE-2023-45139
fonttools XML External Entity Injection (XXE) Vulnerability
Low
CVE-2023-46126
Fides JavaScript Injection Vulnerability in Privacy Center URL
High
CVE-2023-35932
jcvi vulnerable to Configuration Injection due to unsanitized user input
High
CVE-2023-32309
Any file can be included with the pymdown-snippets extension
High
CVE-2023-32758
git-url-parse Regular Expression Denial of Service
High
CVE-2023-28117
Sentry SDK leaks sensitive session information when `sendDefaultPII` is set to `True`
High
CVE-2022-1941
protobuf-cpp and protobuf-python have potential Denial of Service issue
High
CVE-2026-55514
vLLM denial of service via prompt embeds on M-RoPE models
Medium
CVE-2026-55798
Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path
Medium
CVE-2018-1000225
Cobbler XSS Vulnerability
Critical
CVE-2026-14535
In Trail of Bits fickling versions up to and including 0.1.11, the UnsafeImportsML analysis pass unconditionally calls AnalysisContext.shorten_code(node) on every import node it inspects, regardless o
High
CVE-2026-14534
Trail of Bits fickling versions up to and including 0.1.10 do not include the Python standard library modules _posixsubprocess, site, and atexit in the UNSAFE_IMPORTS denylist (fickle.py). Because the
Unrated
pysec-2026-611
Malicious code in uprobe (PyPI)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.