Medium
CVE-2024-29032
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,016
Reset filters
High
CVE-2024-28865
Denial of service via regular expression
Medium
CVE-2024-28102
JWCrypto vulnerable to JWT bomb Attack in `deserialize` function
High
CVE-2024-26164
Remote Code Execution Vulnerability in Microsoft Django Backend for SQL Server
Medium
CVE-2024-27287
esphome vulnerable to stored Cross-site Scripting in edit configuration file API
High
CVE-2024-27292
Docassemble unauthorized access through URL manipulation
High
CVE-2024-25723
ZenML Server Remote Privilege Escalation Vulnerability
Medium
CVE-2024-27290
Docassemble HTML and javascript injection
Medium
CVE-2024-27291
Docassemble open redirect
High
CVE-2023-50782
Python Cryptography package vulnerable to Bleichenbacher timing oracle attack
Medium
CVE-2024-24595
Allegro AI ClearML Stores Credentials in Plaintext in MongoDB Instance
Medium
CVE-2023-50781
m2crypto Bleichenbacher timing attack - incomplete fix for CVE-2020-25657
High
CVE-2024-22421
JupyterLab vulnerable to potential authentication and CSRF tokens leak
Medium
CVE-2023-6395
Privilege escalation for users that can access mock configuration
High
CVE-2024-22415
Unsecured endpoints in the jupyter-lsp server extension
High
CVE-2024-21644
pyload Unauthenticated Flask Configuration Leakage vulnerability
High
CVE-2023-45139
fonttools XML External Entity Injection (XXE) Vulnerability
High
CVE-2024-21642
D-Tale server-side request forgery through Web uploads
Medium
CVE-2023-48795
Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin
Medium
CVE-2023-50715
User accounts disclosed to unauthenticated actors on the LAN
Medium
CVE-2023-50248
Out of memory error when submitting the dataset form with a specially-crafted field
Medium
CVE-2023-48299
TorchServe ZipSlip
High
CVE-2023-47890
Download to arbitrary folder can lead to RCE
High
CVE-2023-48224
Ethyca Fides Cryptographically Weak Generation of One-Time Codes for Identity Verification
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.