Medium
CVE-2024-28148
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,855
Reset filters
High
CVE-2024-34246
wasm3 v0.5.0 was discovered to contain an out-of-bound memory read which leads to segmentation fault via the function "main" in wasm3/platforms/app/main.c.
Critical
CVE-2024-34249
wasm3 v0.5.0 was discovered to contain a heap buffer overflow which leads to segmentation fault via the function "DeallocateSlot" in wasm3/source/m3_compile.c.
High
CVE-2024-34252
wasm3 v0.5.0 was discovered to contain a global buffer overflow which leads to segmentation fault via the function "PreserveRegisterIfOccupied" in wasm3/source/m3_compile.c.
Medium
CVE-2024-34529
Nebari through 2024.4.1 prints the temporary Keycloak root password.
Medium
CVE-2024-34528
WordOps through 3.20.0 has a wo/cli/plugins/stack_pref.py TOCTOU race condition because the conf_path os.open does not use a mode parameter during file creation.
High
CVE-2024-34510
Gradio before 4.20 allows credential leakage on Windows.
Low
CVE-2024-31636
An issue in LIEF v.0.14.1 allows a local attacker to obtain sensitive information via the name parameter of the machd_reader.c component.
Critical
CVE-2024-3955
CraftBeerPi 4 allows arbitrary code execution
Critical
CVE-2024-33768
lunasvg v2.3.9 was discovered to contain a segmentation violation via the component composition_solid_source_over.
Medium
CVE-2024-33766
lunasvg v2.3.9 was discovered to contain an FPE (Floating Point Exception) at blend_transformed_tiled_argb.isra.0.
Medium
CVE-2024-33767
lunasvg v2.3.9 was discovered to contain a segmentation violation via the component composition_solid_source.
Medium
CVE-2024-33764
lunasvg v2.3.9 was discovered to contain a stack-overflow at lunasvg/source/element.h.
High
CVE-2024-33763
lunasvg v2.3.9 was discovered to contain a stack-buffer-underflow at lunasvg/source/layoutcontext.cpp.
Medium
CVE-2024-33664
python-jose through 3.3.0 allows attackers to cause a denial of service (resource consumption) during a decode via a crafted JSON Web Encryption (JWE) token with a high compression ratio, aka a "JWT b
Medium
CVE-2024-32645
Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. In versions 0.3.10 and prior, incorrect values can be logged when `raw_log` builtin is called with memory or storage argum
Medium
CVE-2024-32649
Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. In versions 0.3.10 and prior, using the `sqrt` builtin can result in double eval vulnerability when the argument has side-
Medium
CVE-2024-32648
vyper default functions don't respect nonreentrancy keys
Medium
CVE-2024-32647
vyper performs double eval of raw_args in create_from_blueprint
Medium
CVE-2024-32646
vyper performs double eval of the slice start/length args in certain cases
Medium
CVE-2024-32481
vyper's range(start, start + N) reverts for negative numbers
Medium
CVE-2024-31208
Synapse V2 state resolution weakness allows Denial of Service (DoS)
Medium
ghsa-w228-rfpx-fhm4
cg vulnerable to an Open Redirect Vulnerability on Referer Header
High
ghsa-p72q-h37j-3hq7
dbt uses a SQLparse version with a high vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.