High
CVE-2024-1561
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2024-3571
langchain vulnerable to path traversal
Low
CVE-2024-29733
Improper Certificate Validation vulnerability in Apache Airflow FTP Provider
Medium
CVE-2024-27306
aiohttp Cross-site Scripting vulnerability on index pages for static file handling
Medium
CVE-2023-29483
Potential DoS via the Tudoor mechanism in eventlet and dnspython
Medium
CVE-2024-3772
Pydantic regular expression denial of service
High
CVE-2024-4340
sqlparse parsing heavily nested list leads to Denial of Service
Medium
CVE-2024-1183
gradio Server-Side Request Forgery vulnerability
High
CVE-2024-1135
Request smuggling leading to endpoint restriction bypass in Gunicorn
High
CVE-2024-32005
NiceGUI allows potential access to local file system
High
CVE-2024-2196
Aim Cross-Site Request Forgery vulnerability allows user to delete runs and perform other operations
Medium
CVE-2024-28718
OpenStack magnum vulnerable to time-of-check to time-of-use (TOCTOU) attack
High
CVE-2024-28219
Pillow buffer overflow vulnerability
High
CVE-2024-30265
Voilà Local file inclusion
Low
CVE-2024-3568
Transformers Deserialization of Untrusted Data vulnerability
High
CVE-2024-30248
Piccolo Admin's raw SVG loading may lead to complete data compromise from admin page
High
CVE-2024-22423
yt-dlp: `--exec` command injection when using `%q` in yt-dlp on Windows (Bypass of CVE-2023-40581)
High
CVE-2024-3116
pgAdmin Remote Code Execution (RCE) vulnerability
Medium
CVE-2024-31215
Mobile Security Framework (MobSF) vulnerable to SSRF in firebase database check
High
CVE-2024-28732
Ryu Infinite Loop vulnerability
High
CVE-2024-29905
DIRAC: Unauthorized users can read proxy contents during generation
High
CVE-2024-29640
aliyundrive-webdav vulnerable to Command Injection
High
CVE-2024-28233
Cross site scripting (XSS) in JupyterHub via Self-XSS leveraged by Cookie Tossing
Medium
CVE-2024-29888
Saleor: Customers' addresses leak when using Warehouse as a `Pickup: Local stock only` delivery method
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.