High
CVE-2024-1603
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
High
CVE-2024-2206
gradio Server-Side Request Forgery vulnerability
Low
CVE-2024-29199
Unauthenticated views may expose information to anonymous users
Medium
CVE-2024-1455
LangChain's XMLOutputParser vulnerable to XML Entity Expansion
High
CVE-2024-29019
ESPHome vulnerable to Authentication bypass via Cross site request forgery
High
CVE-2024-29189
ansys-geometry-core OS Command Injection vulnerability
Medium
CVE-2024-29156
Information leakage in YAQL
Medium
CVE-2024-29032
`qiskit_ibm_runtime.RuntimeDecoder` can execute arbitrary code
Medium
CVE-2024-24770
vantage6 vulnerable to a username timing attack on recover password/MFA token
High
CVE-2024-28865
Denial of service via regular expression
Medium
CVE-2024-27097
Potential log injection in reset user endpoint in CKAN
Low
CVE-2024-22513
Improper Privilege Management in djangorestframework-simplejwt
High
CVE-2023-41334
RCE in TranformGraph().to_dot_graph function
High
CVE-2024-29033
GoogleOAuthenticator.hosted_domain incorrectly verifies membership of an Google organization/workspace
Medium
CVE-2024-22889
Phone information disclosure vulnerability
High
CVE-2024-0815
PaddlePaddle command injection in paddle.utils.download._wget_download
Medium
CVE-2024-28102
JWCrypto vulnerable to JWT bomb Attack in `deserialize` function
High
CVE-2024-26164
Remote Code Execution Vulnerability in Microsoft Django Backend for SQL Server
High
CVE-2024-0817
PaddlePaddle command injection vulnerability
Medium
CVE-2024-52288
LibOSDP RMAC revert to the beginning of the session
Medium
CVE-2024-52296
LibOSDP vulnerable to a null pointer deref in osdp_reply_name
Medium
CVE-2024-27287
esphome vulnerable to stored Cross-site Scripting in edit configuration file API
High
CVE-2024-27081
ESPHome vulnerable to remote code execution via arbitrary file write
Medium
CVE-2024-2319
Django MarkdownX Cross-Site Scripting (XSS) vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.