High
CVE-2024-7340
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2024-42367
In aiohttp, compressed files as symlinks are not protected from path traversal
Medium
CVE-2024-41671
twisted.web has disordered HTTP pipeline response
High
CVE-2024-35199
TorchServe gRPC Port Exposure
High
CVE-2024-41656
Sentry vulnerable to stored Cross-Site Scripting (XSS)
Low
CVE-2024-41124
[PUNCIA] [CWE-319] Cleartext Transmission of Sensitive Information via HTTP urls in `API_URLS`
High
CVE-2024-6961
Guardrails AI vulnerable to Improper Restriction of XML External Entity Reference
Medium
CVE-2024-39123
Calibre-Web Cross Site Scripting (XSS)
Medium
CVE-2024-40767
OpenStack Nova vulnerable to unauthorized access to potentially sensitive data
Medium
CVE-2024-41129
ops leaking secrets if `subprocess.CalledProcessError` happens with a `secret-*` CLI command
Medium
CVE-2024-29073
Anki Latex Incomplete Blocklist Vulnerability
Low
CVE-2024-32152
Ankitects Anki LaTeX Blocklist Bypass vulnerability
High
CVE-2024-26020
Ankitects Anki arbitrary script execution vulnerability
Medium
CVE-2024-6578
Aim Stored Cross-site Scripting Vulnerability
High
CVE-2024-6281
LoLLMS vulnerable to Expected Behavior Violation
High
CVE-2024-6345
setuptools vulnerable to Command Injection via package URL
Medium
CVE-2024-5569
zipp Denial of Service vulnerability
Low
CVE-2024-39303
Weblate vulnerable to improper sanitization of project backups
High
CVE-2024-5753
Vanna vulnerable to SQL Injection
Low
CVE-2024-40647
Sentry's Python SDK unintentionally exposes environment variables to subprocesses
High
CVE-2024-38519
yt-dlp File system modification and RCE through improper file-extension sanitization
Medium
CVE-2024-40627
OpaMiddleware does not filter HTTP OPTIONS requests
High
CVE-2024-39903
Local File Inclusion in Solara
Medium
CVE-2024-39905
Red-DiscordBot vulnerable to Incorrect Authorization in commands API
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.