Medium
ghsa-rjc6-vm4h-85cg
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,999
Reset filters
Critical
CVE-2024-39205
pyload-ng vulnerable to RCE with js2py sandbox escape
High
CVE-2024-24759
MindsDB Vulnerable to Bypass of SSRF Protection with DNS Rebinding
Medium
CVE-2024-45399
Indico has a Cross-Site-Scripting during account creation
High
ghsa-xm4r-5rj9-2pg3
gratient 0.5 contains credential harvesting code
Medium
CVE-2024-41937
Apache Airflow Cross-site Scripting Vulnerability
High
CVE-2024-43406
LF Edge eKuiper has a SQL Injection in sqlKvStore
High
CVE-2024-41942
JupyterHub has a privilege escalation vulnerability with the `admin:users` scope
Critical
CVE-2024-6255
A vulnerability in the JSON file handling of gaizhenbiao/chuanhuchatgpt version 20240410 allows any user to delete any JSON file on the server, including critical configuration files such as `config.j
Medium
CVE-2024-41810
Twisted vulnerable to HTML injection in HTTP redirect body
Medium
ghsa-vhmj-5q9r-mm9g
BlastRADIUS also affects eduMFA
Medium
CVE-2024-31979
Server-Side Request Forgery (SSRF) vulnerability in Apache StreamPipes during installation process of pipeline elements.
Medium
CVE-2024-39887
Apache Superset vulnerable to improper SQL authorization
Critical
CVE-2024-21513
Versions of the package langchain-experimental from 0.0.15 and before 0.0.21 are vulnerable to Arbitrary Code Execution when retrieving values from the database, the code will attempt to call 'eval' o
High
ghsa-5grr-72f9-678v
Malware package cipherbcrypt
Critical
CVE-2024-6037
A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows an attacker to create arbitrary folders at any location on the server, including the root directory (C: dir). This can lead to unc
Critical
CVE-2024-6036
A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows any user to restart the server at will by sending a specific request to the `/queue/join?` endpoint with `"fn_index":66`. This unr
Unrated
pysec-2024-55
Malicious package. Exfiltrated secrets to a target server.
Medium
CVE-2024-32498
OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access
Critical
CVE-2024-5980
pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint
Critical
CVE-2024-5826
vanna vulnerable to remote code execution caused by prompt injection
Critical
CVE-2024-5822
A Server-Side Request Forgery (SSRF) vulnerability exists in the upload processing interface of gaizhenbiao/ChuanhuChatGPT versions <= ChuanhuChatGPT-20240410-git.zip. This vulnerability allows attack
Medium
CVE-2023-49793
CodeChecker has a Path traversal in `CodeChecker server` in the endpoint of `CodeChecker store`
Medium
CVE-2024-34693
Apache Superset server arbitrary file read
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.