Critical
CVE-2024-53947
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,855
Reset filters
Medium
CVE-2024-53948
Apache Superset: Error verbosity exposes metadata in analytics databases
Medium
CVE-2024-53949
Apache Superset: Lower privilege users are able to create Role when FAB_ADD_SECURITY_API is enabled
High
CVE-2024-53908
Django SQL injection in HasKey(lhs, rhs) on Oracle
Medium
CVE-2024-53907
Django denial-of-service in django.utils.html.strip_tags()
High
CVE-2024-12107
Double-Free Vulnerability in uD3TN BPv7 Caused by Malformed Endpoint Identifier allows remote attacker to reliably cause DoS
Medium
CVE-2024-37303
Synapse's unauthenticated writes to the media repository allow planting of problematic content
High
CVE-2024-37302
Synapse denial of service through media disk space consumption
High
CVE-2024-54000
MobSF vulnerability allows SSRF due to the allow_redirects=True parameter
Unrated
CVE-2024-52338
Deserialization of untrusted data in IPC and Parquet readers in the Apache Arrow R package versions 4.0.0 through 16.1.0 allows arbitrary code execution. An application is vulnerable if it
High
ghsa-486g-47cc-8wxf
aiocpa contains credential harvesting code
Unrated
pysec-2024-152
aiocpa 0.1.13 contains credential harvesting code
High
CVE-2024-27134
Excessive directory permissions in MLflow leads to local privilege escalation when using spark_udf. This behavior can be exploited by a local attacker to gain elevated permissions by using a ToCToU at
High
CVE-2024-53899
virtualenv allows command injection through activation scripts for a virtual environment
High
CVE-2024-11394
Deserialization of Untrusted Data in Hugging Face Transformers
High
CVE-2024-11393
Deserialization of Untrusted Data in Hugging Face Transformers
High
CVE-2024-11392
Deserialization of Untrusted Data in Hugging Face Transformers
Medium
CVE-2024-53253
Sentry improper error handling leaks Application Integration Client Secret
Medium
CVE-2024-53425
A heap-buffer-overflow vulnerability was discovered in the SkipSpacesAndLineEnd function in Assimp v5.4.3. This issue occurs when processing certain malformed MD5 model files, leading to an out-of-bou
High
CVE-2024-52581
Litestar allows unbounded resource consumption (DoS vulnerability)
High
CVE-2024-52595
HTML Cleaner allows crafted scripts in special contexts like svg or math to pass through
Critical
CVE-2024-47533
cobbler allows anyone to connect to cobbler XML-RPC server with known password and make changes
Medium
CVE-2024-37155
OpenCTI May Bypass Introspection Restriction
Medium
CVE-2024-11319
django CMS Cross-Site Scripting (XSS)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.