High
CVE-2024-29905
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,358
Reset filters
High
CVE-2024-28233
Cross site scripting (XSS) in JupyterHub via Self-XSS leveraged by Cookie Tossing
Medium
CVE-2024-29888
Saleor: Customers' addresses leak when using Warehouse as a `Pickup: Local stock only` delivery method
Low
CVE-2024-29199
Unauthenticated views may expose information to anonymous users
Medium
CVE-2024-1455
LangChain's XMLOutputParser vulnerable to XML Entity Expansion
High
CVE-2024-29019
ESPHome vulnerable to Authentication bypass via Cross site request forgery
Medium
CVE-2024-29156
Information leakage in YAQL
Medium
CVE-2024-29032
`qiskit_ibm_runtime.RuntimeDecoder` can execute arbitrary code
Medium
CVE-2024-24770
vantage6 vulnerable to a username timing attack on recover password/MFA token
High
CVE-2023-41334
RCE in TranformGraph().to_dot_graph function
High
CVE-2024-29033
GoogleOAuthenticator.hosted_domain incorrectly verifies membership of an Google organization/workspace
Medium
CVE-2024-52288
LibOSDP RMAC revert to the beginning of the session
Medium
CVE-2024-27287
esphome vulnerable to stored Cross-site Scripting in edit configuration file API
High
CVE-2024-27081
ESPHome vulnerable to remote code execution via arbitrary file write
High
CVE-2024-27292
Docassemble unauthorized access through URL manipulation
Medium
CVE-2024-27290
Docassemble HTML and javascript injection
Medium
CVE-2024-27291
Docassemble open redirect
Medium
CVE-2024-24808
pyLoad open redirect vulnerability due to improper validation of the is_safe_url function
High
CVE-2024-3572
Scrapy decompression bomb vulnerability
High
CVE-2024-3574
Scrapy authorization header leakage on cross-domain redirect
High
CVE-2024-26151
Potentially untrusted input is rendered as HTML in final output
Medium
CVE-2024-1729
Gradio apps vulnerable to timing attacks to guess password
High
CVE-2024-24590
Allegro AI ClearML vulnerable to deserialization of untrusted data
High
CVE-2024-24591
Allegro AI ClearML path traversal vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.