Medium
CVE-2024-5629
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
High
CVE-2024-37064
ydata unsafe deserialization
High
CVE-2024-37062
ydata unsafe deserialization
High
CVE-2024-4325
Server-Side Request Forgery in gradio
Medium
CVE-2024-3095
Server-Side Request Forgery in langchain-community.retrievers.web_research.WebResearchRetriever
Low
CVE-2024-35196
Slack integration leaks sensitive information in logs
Medium
CVE-2024-3924
code injection vulnerability exists in the huggingface/text-generation-inference repository
Medium
CVE-2024-4330
path traversal vulnerability was identified in the parisneo/lollms-webui
Medium
CVE-2024-35228
Improper Handling of Insufficient Permissions in `wagtail.contrib.settings`
Medium
CVE-2024-1727
Gradio applications running locally vulnerable to 3rd party websites accessing routes and uploading files
Medium
CVE-2024-35180
OMERO.web must check that the JSONP callback is a valid function
Low
CVE-2024-32969
vantage6 collaboration admins can extend their influence by expanding the collaboration
Medium
CVE-2024-35189
Sensitive Data Disclosure Vulnerability in Connection Configuration Endpoints
Medium
CVE-2022-4969
rockhopper Buffer Overflow vulnerability
Low
CVE-2024-34715
Fides Webserver Logs Hosted Database Password Partial Exposure Vulnerability
Medium
CVE-2024-36105
dbt allows Binding to an Unrestricted IP Address via socketsocket
High
CVE-2024-36110
ansibleguy-webui Cross-site Scripting vulnerability
Medium
CVE-2024-28188
jupyter-scheduler's endpoint is missing authentication
High
CVE-2024-35061
NASA AIT-Core uses unencrypted channels to exchange data over the network
High
CVE-2024-34078
Arbitrary HTML present after sanitization because of unicode normalization
High
CVE-2024-34707
Nautobot's BANNER_* configuration can be used to inject arbitrary HTML content into Nautobot pages
High
CVE-2024-4078
LoLLMS Command Injection vulnerability
High
CVE-2024-4264
litellm passes untrusted data to `eval` function without sanitization
Medium
CVE-2024-35195
Requests `Session` object does not verify requests after making first request with verify=False
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.