Critical
CVE-2024-24811
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Critical
CVE-2024-32874
Malicious Long Unicode filenames may cause a Multiple Application-level Denial of Service
Critical
CVE-2024-25128
Flask-AppBuilder vulnerable to incorrect authentication when using auth type OpenID
Critical
CVE-2024-35058
NASA AIT-Core vulnerable to remote code execution
Critical
CVE-2024-32880
pyLoad allows upload to arbitrary folder lead to RCE
Critical
CVE-2024-36039
PyMySQL SQL Injection vulnerability
Critical
CVE-2024-0917
PaddlePaddle vulnerable to remote code execution
Critical
CVE-2024-0818
PaddlePaddle Path Traversal vulnerability
Critical
CVE-2024-2952
LiteLLM has Server-Side Template Injection vulnerability in /completions endpoint
Critical
CVE-2024-35059
NASA AIT-Core vulnerable to remote code execution
Critical
CVE-2024-35057
NASA AIT-Core vulnerable to remote code execution
Critical
CVE-2024-35056
NASA AIT-Core vulnerable to SQL Injection
Critical
CVE-2024-2195
Aim Web API vulnerable to Remote Code Execution
Critical
CVE-2025-54802
pyLoad CNL Blueprint allows Path Traversal through `dlc_path` which leads to Remote Code Execution (RCE)
Critical
CVE-2025-68664
LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs
Critical
CVE-2025-1793
llama_index vulnerable to SQL Injection
Critical
CVE-2025-65896
asyncmy is vulnerable to SQL injection via crafted dict keys
Critical
CVE-2025-53890
pyLoad vulnerable to XSS through insecure CAPTCHA
Critical
CVE-2025-54381
BentoML SSRF Vulnerability in File Upload Processing
Critical
CVE-2025-65015
joserfc has Possible Uncontrolled Resource Consumption Vulnerability Triggered by Logging Arbitrarily Large JWT Token Payloads
Critical
Exploited in attacks
CVE-2025-62593
Ray is vulnerable to Critical RCE via Safari & Firefox Browsers through DNS Rebinding Attack
Critical
CVE-2025-34351
Ray's New Token Authentication is Disabled By Default
Critical
CVE-2024-12366
PandasAI interactive prompt function Remote Code Execution (RCE)
Critical
CVE-2025-46724
Langroid has a Code Injection vulnerability in TableChatAgent
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.