Medium
CVE-2024-41810
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 685
Reset filters
Low
ghsa-3v33-3wmw-3785
yt-dlp has dependency on potentially malicious third-party code in Douyu extractors
Critical
CVE-2024-5980
pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint
Medium
CVE-2023-49793
CodeChecker has a Path traversal in `CodeChecker server` in the endpoint of `CodeChecker store`
Medium
CVE-2024-38356
TinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable_regexp option
Medium
CVE-2024-38357
TinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elements
Medium
CVE-2024-2965
Denial of service in langchain-community
High
CVE-2024-0520
A vulnerability in mlflow/mlflow version 8.2.1 allows for remote code execution due to improper neutralization of special elements used in an OS command ('Command Injection') within the `mlflow.data.h
Medium
ghsa-23j4-mw76-5v7h
Scrapy allows redirect following in protocols other than HTTP
Medium
CVE-2024-32645
Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. In versions 0.3.10 and prior, incorrect values can be logged when `raw_log` builtin is called with memory or storage argum
Medium
CVE-2024-32649
Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. In versions 0.3.10 and prior, using the `sqrt` builtin can result in double eval vulnerability when the argument has side-
Medium
CVE-2024-32648
vyper default functions don't respect nonreentrancy keys
Medium
CVE-2024-32647
vyper performs double eval of raw_args in create_from_blueprint
Medium
CVE-2024-32646
vyper performs double eval of the slice start/length args in certain cases
Medium
CVE-2024-32481
vyper's range(start, start + N) reverts for negative numbers
Medium
CVE-2024-1681
flask-cors vulnerable to log injection when the log level is set to debug
High
CVE-2024-29190
SSRF Vulnerability on assetlinks_check(act_name, well_knowns)
Low
ghsa-879p-8gw4-mcpw
fgr Vulnerable to Insecure Default Variable Initialization
Medium
CVE-2024-24564
Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. When using the built-in `extract32(b, start)`, if the `start` index provided has for side effect to update `b`, the byte a
Medium
CVE-2024-26149
Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. If an excessively large value is specified as the starting index for an array in `_abi_decode`, it can cause the read posi
Low
CVE-2024-0243
langchain Server-Side Request Forgery vulnerability
Low
ghsa-c4cm-r9fh-jgj9
commonground-api-common unexploitable privilege escalation in JWT authentication middleware
Critical
CVE-2024-24563
Vyper negative array index bounds checks
Low
CVE-2024-24560
Vyper's external calls can overflow return data to return input buffer
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.