Medium
CVE-2024-41129
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 704
Reset filters
High
CVE-2024-38519
yt-dlp File system modification and RCE through improper file-extension sanitization
High
CVE-2024-6227
Aim denial of service vulnerability
High
CVE-2024-4340
sqlparse parsing heavily nested list leads to Denial of Service
High
CVE-2024-22423
yt-dlp: `--exec` command injection when using `%q` in yt-dlp on Windows (Bypass of CVE-2023-40581)
High
CVE-2023-41334
RCE in TranformGraph().to_dot_graph function
Medium
CVE-2024-21645
pyload Log Injection vulnerability
Medium
CVE-2023-5115
Ansible symlink attack vulnerability
Medium
CVE-2023-48299
TorchServe ZipSlip
Medium
CVE-2023-46121
yt-dlp Generic Extractor MITM Vulnerability via Arbitrary Proxy Injection
Medium
CVE-2023-5189
Ansible galaxy-importer Path Traversal vulnerability
High
CVE-2023-40581
yt-dlp on Windows vulnerable to `--exec` command injection when using `%q`
Medium
CVE-2023-35934
yt-dlp File Downloader cookie leak
Medium
CVE-2023-36464
pypdf and PyPDF2 possible Infinite Loop when a comment isn't followed by a character
Medium
CVE-2023-36807
PyPDF2 vulnerable to possible Infinite Loop when reading malformed objects
Medium
CVE-2023-23608
Path traversal in spotipy
High
CVE-2022-4510
Path traversal in binwalk
High
CVE-2022-4885
sviehb/jefferson vulnerable to path traversal
Medium
CVE-2021-4287
binwalk vulnerable to UNIX Symbolic Link (Symlink) Following
High
CVE-2022-42906
Powerline Gitstatus vulnerable to arbitrary code execution
High
CVE-2026-55514
vLLM denial of service via prompt embeds on M-RoPE models
Critical
CVE-2026-57571
Crawl4AI: Arbitrary file write (path traversal) in crawler downloads can lead to RCE
High
CVE-2026-54059
Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading
Medium
CVE-2022-31153
OpenZeppelin Contracts for Cairo account cannot process transactions on Goerli
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.