Medium
CVE-2024-45188
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
High
CVE-2024-7143
Pulp incorrectly assigns RBAC permissions in tasks that create objects
Medium
CVE-2024-41951
PheonixAppAPI has visible Encoding Maps
High
CVE-2024-41950
Insecure Jinja2 templates rendered in Haystack Components can lead to RCE
Medium
CVE-2024-7319
openstack-heat may disclose sensitive information
Medium
CVE-2024-41955
MobSF vulnerable to Open Redirect in Login Redirect
High
CVE-2024-43399
Mobile Security Framework (MobSF) has a Zip Slip Vulnerability in .a Static Library Files
High
CVE-2024-7340
Weave server API vulnerable to arbitrary file leak
Medium
CVE-2024-42367
In aiohttp, compressed files as symlinks are not protected from path traversal
Medium
CVE-2024-41671
twisted.web has disordered HTTP pipeline response
High
CVE-2024-35199
TorchServe gRPC Port Exposure
High
CVE-2024-41656
Sentry vulnerable to stored Cross-Site Scripting (XSS)
Low
CVE-2024-41124
[PUNCIA] [CWE-319] Cleartext Transmission of Sensitive Information via HTTP urls in `API_URLS`
High
CVE-2024-6961
Guardrails AI vulnerable to Improper Restriction of XML External Entity Reference
Medium
CVE-2024-39123
Calibre-Web Cross Site Scripting (XSS)
Medium
CVE-2024-40767
OpenStack Nova vulnerable to unauthorized access to potentially sensitive data
Medium
CVE-2024-41129
ops leaking secrets if `subprocess.CalledProcessError` happens with a `secret-*` CLI command
Medium
CVE-2024-29073
Anki Latex Incomplete Blocklist Vulnerability
Low
CVE-2024-32152
Ankitects Anki LaTeX Blocklist Bypass vulnerability
High
CVE-2024-26020
Ankitects Anki arbitrary script execution vulnerability
Medium
CVE-2024-6578
Aim Stored Cross-site Scripting Vulnerability
High
CVE-2024-6281
LoLLMS vulnerable to Expected Behavior Violation
High
CVE-2024-6345
setuptools vulnerable to Command Injection via package URL
Medium
CVE-2024-5569
zipp Denial of Service vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.