Critical
CVE-2024-36265
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,999
Reset filters
Medium
CVE-2024-35225
Jupyter Server Proxy allows users to run arbitrary external processes alongside their notebook server and provide authenticated web access to them. Versions of 3.x prior to 3.2.4 and 4.x prior to 4.2.
Medium
CVE-2024-58384
Tornado has a CRLF injection in CurlAsyncHTTPClient headers
Medium
CVE-2024-14029
Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') in tornado
Medium
CVE-2024-2965
Denial of service in langchain-community
High
CVE-2024-3408
Authentication bypass in dtale
High
CVE-2024-35178
Jupyter server on Windows discloses Windows user password hash
Critical
CVE-2024-3829
qdrant input validation failure
Critical
CVE-2024-5023
ConsoleMe has an Arbitrary File Read Vulnerability via Limited Git command
High
CVE-2024-4321
A Local File Inclusion (LFI) vulnerability exists in the gaizhenbiao/chuanhuchatgpt application, specifically within the functionality for uploading chat history. The vulnerability arises due to impro
Medium
ghsa-23j4-mw76-5v7h
Scrapy allows redirect following in protocols other than HTTP
High
CVE-2024-34252
wasm3 v0.5.0 was discovered to contain a global buffer overflow which leads to segmentation fault via the function "PreserveRegisterIfOccupied" in wasm3/source/m3_compile.c.
Medium
CVE-2024-31208
Synapse V2 state resolution weakness allows Denial of Service (DoS)
Medium
ghsa-w228-rfpx-fhm4
cg vulnerable to an Open Redirect Vulnerability on Referer Header
Medium
CVE-2024-31869
Apache Airflow: Sensitive configuration for providers displayed when "non-sensitive-only" config used
Critical
CVE-2024-3271
llama-index-core Command Injection vulnerability
Critical
CVE-2024-3573
mlflow/mlflow is vulnerable to Local File Inclusion (LFI) due to improper parsing of URIs, allowing attackers to bypass checks and read arbitrary files on the system. The issue arises from the 'is_loc
High
CVE-2024-1560
mlflow vulnerable to Path Traversal
High
CVE-2024-1594
mlflow vulnerable to Path Traversal
High
CVE-2024-1593
mlflow vulnerable to Path Traversal
High
CVE-2024-1558
mlflow vulnerable to Path Traversal
Critical
CVE-2024-2912
Insecure deserialization in BentoML
High
CVE-2024-1483
mlflow Path Traversal vulnerability
High
CVE-2024-0081
NVIDIA NeMo framework for Ubuntu contains a vulnerability in tools/asr_webapp where an attacker may cause an allocation of resources without limits or throttling. A successful exploit of this vulnerab
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.