High
CVE-2024-6090
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,319
Reset filters
Medium
CVE-2023-49793
CodeChecker has a Path traversal in `CodeChecker server` in the endpoint of `CodeChecker store`
Medium
CVE-2024-14029
Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') in tornado
Medium
ghsa-23j4-mw76-5v7h
Scrapy allows redirect following in protocols other than HTTP
Medium
ghsa-jm3v-qxmh-hxwv
Scrapy's redirects ignoring scheme-specific proxy settings
Medium
CVE-2024-28148
Apache Superset Incorrect Authorization vulnerability
Medium
CVE-2024-32647
vyper performs double eval of raw_args in create_from_blueprint
Medium
CVE-2024-32646
vyper performs double eval of the slice start/length args in certain cases
Medium
CVE-2024-32481
vyper's range(start, start + N) reverts for negative numbers
Medium
CVE-2024-24564
Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. When using the built-in `extract32(b, start)`, if the `start` index provided has for side effect to update `b`, the byte a
Medium
CVE-2024-26149
Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. If an excessively large value is specified as the starting index for an array in `_abi_decode`, it can cause the read posi
High
CVE-2024-26134
cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) (RFC 8949) serialization format. Starting in version 5.5.1 and prior to version 5.6.2, an attacker can crash a
Low
ghsa-77hh-43cm-v8j6
tuf's Metadata API: Targets.get_delegated_role() is missing input validation
High
CVE-2024-24762
python-multipart vulnerable to Content-Type Header ReDoS
Low
CVE-2024-24560
Vyper's external calls can overflow return data to return input buffer
Critical
CVE-2024-24561
Vyper's bounds check on built-in `slice()` function can be overflowed
Medium
CVE-2024-24567
Vyper's raw_call `value=` kwargs not disabled for static and delegate calls
Medium
CVE-2023-51702
Apache Airflow CNCF Kubernetes provider, Apache Airflow: Kubernetes configuration file saved without encryption in the Metadata and logged as plain text in the Triggerer service
Medium
CVE-2024-23633
Cross-site Scripting Vulnerability on Data Import
High
CVE-2023-47115
Cross-site Scripting Vulnerability on Avatar Upload
Unrated
pysec-2024-1
gratient 0.5 contains credential harvesting code
Medium
CVE-2023-51663
Hail relies on OIDC email claims to verify the validity of a user's domain.
High
CVE-2023-50731
GitHub Security Lab (GHSL) Vulnerability Report: Arbitary write GHSL-2023-182
Medium
ghsa-4h72-34j6-j8x7
Maloja error page XSS vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.