Medium
CVE-2024-27763
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2025-27018
Apache Airflow MySQL Provider is Vulnerable to SQL Injection
High
CVE-2025-25305
Home Assistant does not correctly validate SSL for outgoing requests in core and used libs
Low
CVE-2024-12797
Vulnerable OpenSSL included in cryptography wheels
Medium
CVE-2025-1057
Keylime registrar is vulnerable to Denial-of-Service attack when updated to version 7.12.0
High
CVE-2025-24372
CKAN has an XSS vector in user uploaded images in group/org and user profiles
High
CVE-2025-24804
MobSF Partial Denial of Service (DoS)
Medium
CVE-2025-25296
Label Studio allows Cross-Site Scripting (XSS) via GET request to `/projects/upload-example` endpoint
High
CVE-2025-25297
Label Studio allows Server-Side Request Forgery in the S3 Storage Endpoint
High
CVE-2025-25295
Label Studio has a Path Traversal Vulnerability via image Field
High
CVE-2025-24359
ASTEVAL Allows Maliciously Crafted Format Strings to Lead to Sandbox Escape
High
CVE-2025-23205
nbgrader's `frame-ancestors: self` grants all users access to formgrader
High
CVE-2025-24803
MobSF Stored Cross-Site Scripting (XSS)
High
CVE-2025-24805
MobSF Local Privilege Escalation
High
CVE-2025-23217
Mitmweb API Authentication Bypass Using Proxy Server
High
CVE-2025-22153
try/except* clauses could allow bypass RestrictedPython via type confusion bug in the CPython interpreter
Low
CVE-2025-22151
Strawberry GraphQL has type resolution vulnerability in node interface that allows potential data leakage through incorrect type resolution
Low
CVE-2024-53995
GHSL-2024-288: SickChill open redirect in login
Medium
CVE-2024-50633
Indico Insecure Access
High
CVE-2024-56509
changedetection.io Vulnerable to Improper Input Validation Leading to LFR/Path Traversal
High
CVE-2023-1907
pgAdmin has Incorrect Default Permissions
High
CVE-2025-21618
NiceGUI On Air authentication issue
High
CVE-2024-39025
Letta (previously MemGPT) incorrect access control vulnerability
Medium
CVE-2024-52294
khoj has an IDOR in subscription management allows unauthorized subscription modifications
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.