High
CVE-2024-52803
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2024-52787
libre-chat Path Traversal vulnerability
Low
CVE-2024-52008
Password Policy Bypass Vulnerability in Fides Webserver User Accept Invite API
Medium
CVE-2024-11406
django CMS Attributes Field Cross-site Scripting
Medium
CVE-2024-11404
Django Filer Unrestricted Upload of File with Dangerous Type
Medium
CVE-2024-52304
aiohttp allows request smuggling due to incorrect parsing of chunk extensions
Medium
CVE-2024-52303
aiohttp has a memory leak when middleware is enabled when requesting a resource with a non-allowed method
Low
CVE-2024-50378
Apache Airflow vulnerable to Insertion of Sensitive Information Into Sent Data
Medium
CVE-2023-6110
OpenStack improperly deletes access rules
Medium
CVE-2024-4311
Missing ratelimit on passwrod resets in zenml
Medium
CVE-2023-34049
Salt preflight script could be attacker controlled
Medium
CVE-2021-3987
Improper Access Control in janeczku/calibre-web
Medium
CVE-2021-3988
Cross-site Scripting (XSS) - DOM in janeczku/calibre-web
Medium
CVE-2021-3986
Generation of Error Message Containing Sensitive Information in janeczku/calibre-web
High
CVE-2024-51998
changedetection.io path traversal using file URI scheme without supplying hostname
Medium
CVE-2024-52524
ReDoS in giskard's transformation.py (GHSL-2024-324)
Low
CVE-2024-11079
Ansible-Core vulnerable to content protections bypass
Medium
CVE-2024-9902
ansible-core Incorrect Authorization vulnerability
Medium
CVE-2024-49767
Werkzeug possible resource exhaustion when parsing file data in forms
High
CVE-2024-47874
Starlette Denial of service (DoS) via multipart/form-data
Medium
CVE-2024-49766
Werkzeug safe_join not safe on Windows
Medium
CVE-2024-48052
gradio Server Side Request Forgery vulnerability
Medium
CVE-2024-10073
Flair allows arbitrary code execution
Medium
CVE-2024-51483
changedetection.io Path Traversal
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.