Low
CVE-2024-6971
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,016
Reset filters
High
CVE-2024-45601
Mesop has a local file Inclusion via static file serving functionality
Medium
CVE-2024-8939
vLLM Denial of Service via the best_of parameter
High
CVE-2024-8768
vLLM denial of service vulnerability
Medium
CVE-2024-8865
Composio Path Traversal vulnerability
Medium
CVE-2024-45314
Flask-AppBuilder's login form allows browser to cache sensitive fields
High
CVE-2024-6587
LiteLLM Server-Side Request Forgery (SSRF) vulnerability
High
CVE-2024-45847
MindsDB Eval Injection vulnerability
Low
CVE-2024-45052
Timing-Based Username Enumeration Vulnerability in Fides Webserver Authentication
Medium
CVE-2024-45595
D-Tale vulnerable to Remote Code Execution through the Query input on Chart Builder
High
CVE-2024-45053
Remote Code Execution Vulnerability via SSTI in Fides Webserver Jinja Email Templating Engine
Medium
CVE-2024-41674
CKAN may leak Solr credentials via error message in package_search action
Medium
CVE-2024-43371
Potential access to sensitive URLs via CKAN extensions (SSRF)
Medium
CVE-2024-45187
Mage AI incorrectly gives privileges to users with deleted accounts
Medium
CVE-2024-45189
Mage AI Path Traversal vulnerability
Medium
CVE-2024-45190
Mage AI Path Traversal vulnerability
Medium
CVE-2024-8072
Mage AI allows remote unauthenticated attackers to leak the terminal server command history of arbitrary users
Medium
CVE-2024-45188
Mage AI Path Traversal vulnerability
High
CVE-2024-43399
Mobile Security Framework (MobSF) has a Zip Slip Vulnerability in .a Static Library Files
High
CVE-2024-7340
Weave server API vulnerable to arbitrary file leak
Medium
CVE-2024-42367
In aiohttp, compressed files as symlinks are not protected from path traversal
Medium
CVE-2024-41671
twisted.web has disordered HTTP pipeline response
High
CVE-2024-35199
TorchServe gRPC Port Exposure
Medium
CVE-2024-40767
OpenStack Nova vulnerable to unauthorized access to potentially sensitive data
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.