High
CVE-2024-6345
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,016
Reset filters
Low
CVE-2024-39303
Weblate vulnerable to improper sanitization of project backups
High
CVE-2024-5753
Vanna vulnerable to SQL Injection
Medium
CVE-2024-40627
OpaMiddleware does not filter HTTP OPTIONS requests
High
CVE-2024-5824
lollms path traversal vulnerability allows overriding of config.yaml file, leading to RCE
Low
CVE-2024-38537
Inclusion of Untrusted polyfill.io Code Vulnerability in fides.js
Medium
CVE-2024-31223
Information Disclosure Vulnerability in Privacy Center of SERVER_SIDE_FIDES_API_URL
High
CVE-2024-6227
Aim denial of service vulnerability
Medium
CVE-2024-4460
Improper line feed handling in zenml
High
CVE-2024-22232
Path traversal in saltstack
Medium
CVE-2024-4940
Open redirect in gradio
High
CVE-2024-5979
h2o vulnerable to unexpected POST request shutting down server
High
CVE-2024-38526
pdoc embeds link to malicious CDN if math mode is enabled
High
CVE-2024-6085
lollms vulnerable to path traversal due to unauthenticated root folder settings change
High
CVE-2024-6139
lollms vulnerable to dot-dot-slash path traversal in XTTS server
Medium
CVE-2024-37891
urllib3's Proxy-Authorization request header isn't stripped during cross-origin redirects
Low
CVE-2024-4680
zenml-io/zenml does not expire the session after password reset
High
CVE-2024-34694
LNbits improperly handles potential network and payment failures when using Eclair backend
High
CVE-2024-4888
Arbitrary file deletion in litellm
High
CVE-2024-37301
document-merge-service vulnerable to Remote Code Execution via Server-Side Template Injection
Medium
CVE-2024-5550
Arbitrary system path lookup in h20
Critical
CVE-2026-33264
A bug in `BaseSerialization.deserialize()` allowed unrestricted `import_string()` of attacker-controlled class paths when the Scheduler / API Server loaded a serialized DAG: a DAG author could embed a
High
CVE-2024-4325
Server-Side Request Forgery in gradio
Medium
CVE-2024-3095
Server-Side Request Forgery in langchain-community.retrievers.web_research.WebResearchRetriever
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.