Medium
CVE-2024-24770
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,533
High
CVE-2024-28865
Denial of service via regular expression
Medium
CVE-2024-27097
Potential log injection in reset user endpoint in CKAN
Low
CVE-2024-22513
Improper Privilege Management in djangorestframework-simplejwt
High
CVE-2023-41334
RCE in TranformGraph().to_dot_graph function
High
CVE-2024-29033
GoogleOAuthenticator.hosted_domain incorrectly verifies membership of an Google organization/workspace
Medium
CVE-2024-22889
Phone information disclosure vulnerability
High
CVE-2024-0815
PaddlePaddle command injection in paddle.utils.download._wget_download
Medium
CVE-2024-28102
JWCrypto vulnerable to JWT bomb Attack in `deserialize` function
High
CVE-2024-26164
Remote Code Execution Vulnerability in Microsoft Django Backend for SQL Server
High
CVE-2024-0817
PaddlePaddle command injection vulnerability
Medium
CVE-2024-52288
LibOSDP RMAC revert to the beginning of the session
Medium
CVE-2024-52296
LibOSDP vulnerable to a null pointer deref in osdp_reply_name
Medium
CVE-2024-27287
esphome vulnerable to stored Cross-site Scripting in edit configuration file API
High
CVE-2024-27081
ESPHome vulnerable to remote code execution via arbitrary file write
Medium
CVE-2024-2319
Django MarkdownX Cross-Site Scripting (XSS) vulnerability
High
CVE-2024-28184
WeasyPrint allows the attachment of arbitrary files and URLs to a PDF
High
CVE-2024-27292
Docassemble unauthorized access through URL manipulation
High
CVE-2024-25723
ZenML Server Remote Privilege Escalation Vulnerability
Medium
CVE-2024-27083
Flask-AppBuilder's OAuth login page subject to Cross Site Scripting (XSS)
Medium
CVE-2024-25169
Mezzanine allows attackers to bypass access control mechanisms
Medium
CVE-2024-25170
Mezzanine allows attackers to bypass access controls via manipulating the Host header
Medium
CVE-2024-27290
Docassemble HTML and javascript injection
Medium
CVE-2024-27291
Docassemble open redirect
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.