High
CVE-2024-7983
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 738
Reset filters
High
CVE-2024-8053
Open WebUI lacks authentication for the `api/v1/utils/pdf` endpoint
High
CVE-2024-12534
Open WebUI Uncontrolled Resource Consumption vulnerability
Medium
CVE-2025-0191
A Denial of Service (DoS) vulnerability exists in the file upload feature of gaizhenbiao/chuanhuchatgpt version 20240914. The vulnerability is due to improper handling of form-data with a large filena
Medium
CVE-2024-10955
A Regular Expression Denial of Service (ReDoS) vulnerability exists in gaizhenbiao/chuanhuchatgpt, as of commit 20b2e02. The server uses the regex pattern `r'<[^>]+>'` to parse user input. In Python's
High
CVE-2024-10650
An unauthenticated Denial of Service (DoS) vulnerability was identified in ChuanhuChatGPT version 20240918, which could be exploited by sending large data payloads using a multipart boundary. Although
Critical
CVE-2025-29783
vLLM Allows Remote Code Execution via Mooncake Integration
Critical
CVE-2025-2000
Qiskit allows arbitrary code execution decoding QPY format versions < 13
Medium
CVE-2025-1945
Zip Flag Bit Exploit Crashes Picklescan But Not PyTorch
Medium
CVE-2025-1944
Zip Exploit Crashes Picklescan But Not PyTorch
High
CVE-2025-1403
Malciously crafted QPY files can allows Remote Attackers to Cause Denial of Service in Qiskit
Critical
CVE-2025-24370
Django-Unicorn Class Pollution Vulnerability, Leading to XSS, DoS and Authentication Bypass
Medium
CVE-2024-47868
Gradio has several components with post-process steps allow arbitrary file leaks
Medium
CVE-2024-47164
Gradio's `is_in_or_equal` function may be bypassed
Critical
CVE-2024-39205
pyload-ng vulnerable to RCE with js2py sandbox escape
Critical
CVE-2024-45758
H2O.ai H2O vulnerable to deserialization attacks via a JDBC Connection URL
High
CVE-2024-43406
LF Edge eKuiper has a SQL Injection in sqlKvStore
Medium
CVE-2024-58384
Tornado has a CRLF injection in CurlAsyncHTTPClient headers
Medium
CVE-2024-2171
A stored Cross-Site Scripting (XSS) vulnerability was identified in the zenml-io/zenml repository, specifically within the 'logo_url' field. By injecting malicious payloads into this field, an attacke
Critical
CVE-2024-3829
qdrant input validation failure
Medium
ghsa-3qwc-47jf-5rf7
eth-abi is vulnerable to recursive DoS
Medium
CVE-2024-26152
Summary
Low
ghsa-c4cm-r9fh-jgj9
commonground-api-common unexploitable privilege escalation in JWT authentication middleware
Medium
CVE-2024-23633
Cross-site Scripting Vulnerability on Data Import
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.