Low
CVE-2024-53995
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2024-50633
Indico Insecure Access
High
CVE-2024-56509
changedetection.io Vulnerable to Improper Input Validation Leading to LFR/Path Traversal
High
CVE-2023-1907
pgAdmin has Incorrect Default Permissions
High
CVE-2025-21618
NiceGUI On Air authentication issue
High
CVE-2024-39025
Letta (previously MemGPT) incorrect access control vulnerability
Medium
CVE-2024-52294
khoj has an IDOR in subscription management allows unauthorized subscription modifications
Low
CVE-2024-45033
Apache Airflow Fab Provider Insufficient Session Expiration vulnerability
Low
CVE-2024-55655
sigstore has insufficient validation of integration timestamp during verification
Medium
CVE-2024-9774
python-sql SQL injection vulnerability
Medium
CVE-2024-56142
PGHoard Path Traversal vulnerability
High
CVE-2024-55587
python-libarchive directory traversal
High
CVE-2024-12745
Amazon Redshift Python Connector vulnerable to SQL Injection
Medium
CVE-2024-9427
Koji Cross-site Scripting
High
CVE-2024-56327
pyrage vulnerable to malicious plugin names, recipients, or identities causing arbitrary binary execution
Medium
CVE-2024-56201
Jinja has a sandbox breakout through malicious filenames
Medium
CVE-2024-55890
D-Tale allows Remote Code Execution through the Custom Filter Input
Medium
CVE-2024-56326
Jinja has a sandbox breakout through indirect reference to format method
Medium
CVE-2024-53865
Python package "zhmcclient" stores passwords in clear text in its HMC and API logs
High
CVE-2024-53981
Denial of service (DoS) via deformation `multipart/form-data` boundary
Low
CVE-2024-53861
PyJWT Issuer field partial matches allowed
High
CVE-2024-39163
pyspider Cross-Site Request Forgery (CSRF) via the Flask endpoints
Medium
CVE-2024-53999
Mobile Security Framework (MobSF) Stored Cross-Site Scripting Vulnerability in "Diff or Compare" Functionality
High
CVE-2024-52815
Synapse allows a a malformed invite to break the invitee's `/sync`
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.