Medium
CVE-2024-31223
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,436
High
CVE-2024-6227
Aim denial of service vulnerability
Medium
CVE-2024-22231
Directory creation by malicious user in saltstack
Medium
CVE-2024-4460
Improper line feed handling in zenml
High
CVE-2024-22232
Path traversal in saltstack
Medium
CVE-2024-4940
Open redirect in gradio
High
CVE-2024-5979
h2o vulnerable to unexpected POST request shutting down server
High
CVE-2024-38526
pdoc embeds link to malicious CDN if math mode is enabled
Medium
CVE-2024-3121
Remote Code Execution in create_conda_env function in lollms
High
CVE-2024-6085
lollms vulnerable to path traversal due to unauthenticated root folder settings change
High
CVE-2024-6139
lollms vulnerable to dot-dot-slash path traversal in XTTS server
High
CVE-2024-28397
js2py allows remote code execution
Low
CVE-2024-21520
Cross-site Scripting in djangorestframework
Medium
CVE-2024-5710
litellm vulnerable to improper access control in team management
Medium
CVE-2024-37891
urllib3's Proxy-Authorization request header isn't stripped during cross-origin redirects
Low
CVE-2024-4680
zenml-io/zenml does not expire the session after password reset
Medium
CVE-2024-5225
SQL injection in litellm
High
CVE-2024-3429
LoLLMS Path Traversal vulnerability
High
CVE-2024-34694
LNbits improperly handles potential network and payment failures when using Eclair backend
Medium
CVE-2024-4890
SQL injection in litellm
High
CVE-2024-4888
Arbitrary file deletion in litellm
High
CVE-2024-37388
ebookmeta XML External Entity vulnerability
High
CVE-2024-37301
document-merge-service vulnerable to Remote Code Execution via Server-Side Template Injection
High
CVE-2024-37300
Globus `identity_provider` restriction ignored when used with `allow_all` in JupyterHub 5.0
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.