High
CVE-2024-1483
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,001
Reset filters
High
CVE-2024-0081
NVIDIA NeMo framework for Ubuntu contains a vulnerability in tools/asr_webapp where an attacker may cause an allocation of resources without limits or throttling. A successful exploit of this vulnerab
Critical
CVE-2024-28335
Lektor before 3.3.11 does not sanitize DB path traversal. Thus, shell commands might be executed via a file that is added to the templates directory, if the victim's web browser accesses an untrusted
High
CVE-2024-29190
SSRF Vulnerability on assetlinks_check(act_name, well_knowns)
Low
ghsa-cq96-9974-v8hm
Dynamic Variable Evaluation in qiskit-ibm-runtime
Critical
CVE-2024-28179
Jupyter Server Proxy allows users to run arbitrary external processes alongside their Jupyter notebook servers and provides authenticated web access. Prior to versions 3.2.3 and 4.1.1, Jupyter Server
Medium
CVE-2024-28237
XSS via the "Snapshot Test" feature in Classic Webcam plugin settings
Critical
CVE-2024-22203
Whoogle Search is a self-hosted metasearch engine. In versions prior to 0.8.4, the `element` method in `app/routes.py` does not validate the user-controlled `src_type` and `element_url` variables and
Critical
CVE-2024-22205
Whoogle Search is a self-hosted metasearch engine. In versions 0.8.3 and prior, the `window` endpoint does not sanitize user-supplied input from the `location` variable and passes it to the `send` met
Medium
CVE-2024-23823
vantage6's CORS settings overly permissive
Medium
CVE-2024-27305
aiosmtpd vulnerable to SMTP smuggling
High
CVE-2024-27758
RPyC's missing security check results in code execution when using numpy.array on the server-side.
Critical
CVE-2024-2044
pgAdmin 4 vulnerable to Unsafe Deserialization and Remote Code Execution by an Authenticated user
Critical
CVE-2024-2057
A vulnerability was found in LangChain langchain_community 0.0.26. It has been classified as critical. Affected is the function load_local in the library libs/community/langchain_community/retrievers/
Low
CVE-2024-0243
langchain Server-Side Request Forgery vulnerability
High
CVE-2024-24762
python-multipart vulnerable to Content-Type Header ReDoS
Medium
CVE-2024-21485
Dash apps vulnerable to Cross-site Scripting
Medium
CVE-2023-47116
Label Studio SSRF on Import Bypassing `SSRF_PROTECTION_ENABLED` Protections
Low
CVE-2024-21671
vantage6 vulnerable to username timing attack
Medium
CVE-2024-21653
vantage6 has insecure SSH configuration for node and server containers
Medium
CVE-2024-23829
aiohttp's HTTP parser (the python one, not llhttp) still overly lenient about separators
High
CVE-2024-23334
aiohttp is vulnerable to directory traversal
High
CVE-2023-47115
Cross-site Scripting Vulnerability on Avatar Upload
Low
CVE-2024-23329
changedetection.io API endpoint is not secured with API token
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.