High
ghsa-w2pj-9cgh-mq2c
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,855
Reset filters
High
ghsa-xm4r-5rj9-2pg3
gratient 0.5 contains credential harvesting code
High
ghsa-x6xg-3fj2-4pq3
`exotel` project on PyPI compromised, malicious release made
Medium
ghsa-f3q4-ggfp-jv34
Adyen APIs Library for Python timing attack vulnerability
High
CVE-2024-43805
HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering
High
ghsa-pp84-v3mw-gg4w
Taipy 3.1.1 affected by CVEs on flask-core and pymongo
Medium
CVE-2024-8113
Stored XSS in organizer and event settings of pretix up to 2024.7.0 allows malicious event organizers to inject HTML tags into e-mail previews on settings page. The default Content Security Policy of
Critical
CVE-2024-45201
LlamaIndex includes an exec call for `import {cls_name}`
Medium
CVE-2024-41937
Apache Airflow Cross-site Scripting Vulnerability
High
CVE-2024-43406
LF Edge eKuiper has a SQL Injection in sqlKvStore
High
CVE-2024-6221
Flask-CORS allows the `Access-Control-Allow-Private-Network` CORS header to be set to true by default
Medium
CVE-2024-42353
WebOb's location header normalization during redirect leads to open redirect
Medium
CVE-2024-42474
Path traveral in Streamlit on windows
High
CVE-2024-41942
JupyterHub has a privilege escalation vulnerability with the `admin:users` scope
Medium
CVE-2024-6706
Open WebUI Stored Cross-Site Scripting Vulnerability
Medium
CVE-2024-41990
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize() and urlizetrunc() template filters are subject to a potential denial-of-service attack via very large inputs with
Medium
CVE-2024-41989
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The floatformat template filter is subject to significant memory consumption when given a string representation of a number in
Critical
CVE-2024-42005
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. QuerySet.values() and values_list() methods on models with a JSONField are subject to SQL injection in column aliases via a cr
Medium
CVE-2024-41991
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize and urlizetrunc template filters, and the AdminURLFieldWidget widget, are subject to a potential denial-of-service
Low
CVE-2024-42447
Apache Airflow Providers FAB Insufficient Session Expiration vulnerability
Critical
CVE-2024-6255
A vulnerability in the JSON file handling of gaizhenbiao/chuanhuchatgpt version 20240410 allows any user to delete any JSON file on the server, including critical configuration files such as `config.j
High
CVE-2023-33976
TensorFlow has segfault in array_ops.upper_bound
Medium
CVE-2024-41810
Twisted vulnerable to HTML injection in HTTP redirect body
High
CVE-2024-41672
sniff_csv provides filesystem access even when enable_external_access is disabled in duckdb
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.