Critical
CVE-2024-47533
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,334
Reset filters
Critical
CVE-2024-10081
codechecker vulnerable to authentication bypass when using specifically crafted URLs
Critical
CVE-2024-49768
Waitress has request processing race condition in HTTP pipelining with invalid first request
High
CVE-2024-47821
pyLoad vulnerable to remote code execution by download to /.pyload/scripts using /flashgot API
Medium
CVE-2024-47167
Gradio vulnerable to SSRF in the path parameter of /queue/join
Medium
CVE-2024-47166
Gradio has a one-level read path traversal in `/custom_component`
Medium
CVE-2024-45399
Indico has a Cross-Site-Scripting during account creation
High
ghsa-xm4r-5rj9-2pg3
gratient 0.5 contains credential harvesting code
Medium
CVE-2024-42353
WebOb's location header normalization during redirect leads to open redirect
Low
CVE-2024-40637
dbt has an implicit override for built-in materializations from installed packages
High
ghsa-5grr-72f9-678v
Malware package cipherbcrypt
Critical
CVE-2024-6036
A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows any user to restart the server at will by sending a specific request to the `/queue/join?` endpoint with `"fn_index":66`. This unr
Unrated
pysec-2024-55
Malicious package. Exfiltrated secrets to a target server.
Low
ghsa-3v33-3wmw-3785
yt-dlp has dependency on potentially malicious third-party code in Douyu extractors
Critical
CVE-2024-5980
pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint
High
CVE-2024-6090
A path traversal vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240410, allowing any user to delete other users' chat histories. This vulnerability can also be exploited to delete any fi
Medium
CVE-2023-49793
CodeChecker has a Path traversal in `CodeChecker server` in the endpoint of `CodeChecker store`
Medium
CVE-2024-14029
Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') in tornado
Medium
ghsa-23j4-mw76-5v7h
Scrapy allows redirect following in protocols other than HTTP
Medium
ghsa-jm3v-qxmh-hxwv
Scrapy's redirects ignoring scheme-specific proxy settings
Medium
CVE-2024-28148
Apache Superset Incorrect Authorization vulnerability
Medium
CVE-2024-32647
vyper performs double eval of raw_args in create_from_blueprint
Medium
CVE-2024-32646
vyper performs double eval of the slice start/length args in certain cases
Medium
CVE-2024-32481
vyper's range(start, start + N) reverts for negative numbers
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.