Medium
CVE-2024-45399
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,359
Reset filters
Medium
ghsa-h4gh-qq45-vh27
pyca/cryptography has a vulnerable OpenSSL included in cryptography wheels
High
ghsa-2r6g-7r83-jg72
`spam` project on PyPI compromised, malicious releases made
High
ghsa-xm4r-5rj9-2pg3
gratient 0.5 contains credential harvesting code
High
ghsa-x6xg-3fj2-4pq3
`exotel` project on PyPI compromised, malicious release made
High
ghsa-pp84-v3mw-gg4w
Taipy 3.1.1 affected by CVEs on flask-core and pymongo
Medium
CVE-2024-8113
Stored XSS in organizer and event settings of pretix up to 2024.7.0 allows malicious event organizers to inject HTML tags into e-mail previews on settings page. The default Content Security Policy of
Critical
CVE-2024-45201
LlamaIndex includes an exec call for `import {cls_name}`
Medium
CVE-2024-41937
Apache Airflow Cross-site Scripting Vulnerability
High
CVE-2024-43406
LF Edge eKuiper has a SQL Injection in sqlKvStore
Medium
CVE-2024-42353
WebOb's location header normalization during redirect leads to open redirect
High
CVE-2024-41942
JupyterHub has a privilege escalation vulnerability with the `admin:users` scope
Medium
CVE-2024-41991
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize and urlizetrunc template filters, and the AdminURLFieldWidget widget, are subject to a potential denial-of-service
Low
CVE-2024-42447
Apache Airflow Providers FAB Insufficient Session Expiration vulnerability
Critical
CVE-2024-6255
A vulnerability in the JSON file handling of gaizhenbiao/chuanhuchatgpt version 20240410 allows any user to delete any JSON file on the server, including critical configuration files such as `config.j
Medium
CVE-2024-41810
Twisted vulnerable to HTML injection in HTTP redirect body
High
CVE-2024-41672
sniff_csv provides filesystem access even when enable_external_access is disabled in duckdb
Medium
ghsa-vhmj-5q9r-mm9g
BlastRADIUS also affects eduMFA
Low
CVE-2024-30471
Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache StreamPipes in user self-registration.
High
CVE-2024-39877
Apache Airflow has DAG Author Code Execution possibility in airflow-scheduler
Medium
CVE-2024-39863
Apache Airflow Potential Cross-site Scripting Vulnerability
Critical
ghsa-q5fm-55c2-v6j9
Fiona affected by CVE-2023-45853 related to MiniZip madler-zlib
High
ghsa-g4m4-9q4c-mfw6
Fiona affected by CVE-2020-14152 related to madler-zlib
Critical
CVE-2024-39700
JupyterLab extension template is a `copier` template for JupyterLab extensions. Repositories created using this template with `test` option include `update-integration-tests.yml` workflow which has a
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.