Low
CVE-2024-47813
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 229
Reset filters
High
CVE-2024-8947
A vulnerability was found in MicroPython 1.22.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file py/objarray.c. The manipulation leads to use a
High
CVE-2023-33976
TensorFlow has segfault in array_ops.upper_bound
Critical
CVE-2024-5023
ConsoleMe has an Arbitrary File Read Vulnerability via Limited Git command
Medium
CVE-2024-32646
vyper performs double eval of the slice start/length args in certain cases
High
CVE-2024-27758
RPyC's missing security check results in code execution when using numpy.array on the server-side.
Medium
ghsa-3qwc-47jf-5rf7
eth-abi is vulnerable to recursive DoS
Medium
CVE-2024-24564
Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. When using the built-in `extract32(b, start)`, if the `start` index provided has for side effect to update `b`, the byte a
Medium
CVE-2024-26149
Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. If an excessively large value is specified as the starting index for an array in `_abi_decode`, it can cause the read posi
Critical
CVE-2024-24563
Vyper negative array index bounds checks
Critical
CVE-2024-24561
Vyper's bounds check on built-in `slice()` function can be overflowed
Medium
CVE-2024-24567
Vyper's raw_call `value=` kwargs not disabled for static and delegate calls
High
CVE-2024-22419
concat built-in can corrupt memory in vyper
High
CVE-2023-46247
incorrect storage layout for contracts containing large arrays
Medium
CVE-2023-49081
aiohttp's ClientSession is vulnerable to CRLF injection via version
Medium
ghsa-rqr8-pxh7-cq3g
Ethereum ABI decoder DoS when parsing ZST
Medium
CVE-2023-46136
Werkzeug DoS: High resource usage when parsing multipart/form-data containing a large part with CR/LF character at the beginning
Medium
CVE-2023-41885
Piccolo's current `BaseUser.login` implementation is vulnerable to time based user enumeration
Medium
CVE-2023-40015
Vyper: reversed order of side effects for some operations
Medium
CVE-2023-2970
MindSpore vulnerable to memory corruption
High
CVE-2023-31146
Vyper vulnerable to OOB DynArray access when array is on both LHS and RHS of an assignment
Medium
CVE-2022-41911
Invalid char to bool conversion when printing a tensor
Medium
CVE-2022-41889
Segfault via invalid attributes in `pywrap_tfe_src.cc`
Medium
CVE-2022-41887
Overflow in `tf.keras.losses.poisson`
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.