Vulnerability database
107 records so far. Any CVE or GHSA ID is added the first time someone looks it up, and new GitHub-reviewed advisories and CISA known-exploited CVEs are added in batches. Records refresh from their sources after 24 hours. To fetch an ID that isn't here yet, search for it exactly.
Showing 76 to 100 of 107 records
| ID | Title | Ecosystem | Severity | CVSS | Fix | KEV | Intelligence | Published |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-35195GHSA-9wx4-h78v-vm56 | Requests `Session` object does not verify requests after making first request with verify=False | PyPI | Medium | 5.6v3.1 | Yes | No | None yet | |
| GHSA-44pg-c29v-hp6r | Laravel Guard bypass in Eloquent models | Packagist (PHP) | Medium | None | Yes | No | None yet | |
| CVE-2024-29857GHSA-8xfc-gm6g-vgpv | Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation. | Maven+1 | Medium | 5.3v3.1 | Yes | No | None yet | |
| CVE-2024-30172GHSA-m44j-cfrm-g8qc | Bouncy Castle crafted signature and public key can be used to trigger an infinite loop | Maven+1 | Medium | 6.9v4.0 | Yes | No | None yet | |
| CVE-2024-30171GHSA-v435-xc8x-wvr9 | Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack") | Maven+1 | Medium | 5.9v3.1 | Yes | No | None yet | |
| CVE-2024-34447GHSA-4h8f-2wvx-gg5w | Bouncy Castle Java Cryptography API vulnerable to DNS poisoning | Maven | Medium | 5.9v3.1 | Yes | No | None yet | |
| CVE-2024-3400GHSA-v475-xhc9-wfxg | PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect | Vendor product | Critical | 9.8v3.1 | No | Yes | None yet | |
| CVE-2024-3094GHSA-rxwq-x6h5-x525 | Xz: malicious code in distributed source | Git repositories | Critical | 10.0v3.1 | No | No | None yet | |
| CVE-2024-26624GHSA-5436-7p32-x65c | In the Linux kernel, the following vulnerability has been resolved: af_unix: fix lockdep positiv...Withdrawn | Not listed | Unscored | None | Unknown | No | None yet | |
| CVE-2024-26581GHSA-92f7-c7hw-58cr | netfilter: nft_set_rbtree: skip end interval element from gc | Linux | High | 7.8v3.1 | Yes | No | None yet | |
| CVE-2024-1086GHSA-gfh2-2mj9-m2cx | Use-after-free in Linux kernel's netfilter: nf_tables component | Git repositories | High | 7.8v3.1 | Yes | Yes | None yet | |
| CVE-2023-4966GHSA-2g42-2pwg-93cj | Unauthenticated sensitive information disclosure | Vendor product | Critical | 9.4v3.1 | No | Yes | None yet | |
| CVE-2023-44487GHSA-qppj-fm5r-hxr3 | HTTP/2 Stream Cancellation Attack | Swift+2 | Medium | 6.9v4.0 | Yes | Yes | None yet | |
| CVE-2023-45613GHSA-2fvw-ppfc-cm77 | In JetBrains Ktor before 2.3.5 server certificates were not verified | Git repositories | Medium | 6.8v3.1 | Yes | No | None yet | |
| CVE-2023-3635GHSA-w33c-445m-f8w7 | Okio Signed to Unsigned Conversion Error vulnerability | Maven | Medium | 5.9v3.1 | Yes | No | None yet | |
| CVE-2021-4422GHSA-7qhm-w96c-j5vq | POST SMTP Mailer <= 2.0.20 - Cross-Site Request Forgery Bypass | Git repositories | Medium | 4.3v3.1 | No | No | None yet | |
| CVE-2020-23064GHSA-257q-pv89-v3xv | Duplicate Advisory: jQuery Cross Site Scripting vulnerabilityWithdrawn | npm+3 | Medium | 6.1v3.1 | Yes | No | None yet | |
| CVE-2022-25883GHSA-c2qf-rxjj-qqgw | semver vulnerable to Regular Expression Denial of Service | npm | High | 7.5v3.1 | Yes | No | None yet | |
| CVE-2023-34362GHSA-hq22-q5g8-577g | In Progress MOVEit Transfer before 2021.0.6 (13.0.6), 2021.1.4 (13.1.4), 2022.0.4 (14.0.4), 2022.... | Not listed | Critical | 9.8v3.1 | Unknown | Yes | None yet | |
| CVE-2023-34339GHSA-w2c4-vpgj-g3jp | In JetBrains Ktor before 2.3.1 headers containing authentication data could be added to the excep... | Git repositories | Low | 3.3v3.1 | Yes | No | None yet | |
| GHSA-4q83-7cq4-p6wg | `tokio::io::ReadHalf<T>::unsplit` is Unsound | crates.io (Rust) | Low | None | Yes | No | None yet | |
| CVE-2022-42889GHSA-599f-7c49-w659 | Arbitrary code execution in Apache Commons Text | Maven | Critical | 9.8v3.1 | Yes | No | None yet | |
| CVE-2024-21907GHSA-5crp-9r3c-p9vr | Improper Handling of Exceptional Conditions in Newtonsoft.Json | NuGet | High | 7.5v3.1 | Yes | No | None yet | |
| CVE-2022-22965GHSA-36p3-wjmg-h94x | Remote Code Execution in Spring Framework | Maven | Critical | 9.8v3.1 | Yes | Yes | None yet | |
| CVE-2022-24329GHSA-2qp4-g3q3-f92w | Improper Locking in JetBrains Kotlin | Maven | Medium | 5.3v3.1 | Yes | No | None yet |
- CVE-2024-35195GHSA-9wx4-h78v-vm56
Requests `Session` object does not verify requests after making first request with verify=False
Medium5.6Fix availablePyPI - GHSA-44pg-c29v-hp6r
Laravel Guard bypass in Eloquent models
MediumFix availablePackagist (PHP) - CVE-2024-29857GHSA-8xfc-gm6g-vgpv
Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.
Medium5.3Fix availableMaven+1 - CVE-2024-30172GHSA-m44j-cfrm-g8qc
Bouncy Castle crafted signature and public key can be used to trigger an infinite loop
Medium6.9Fix availableMaven+1 - CVE-2024-30171GHSA-v435-xc8x-wvr9
Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")
Medium5.9Fix availableMaven+1 - CVE-2024-34447GHSA-4h8f-2wvx-gg5w
Bouncy Castle Java Cryptography API vulnerable to DNS poisoning
Medium5.9Fix availableMaven - CVE-2024-3400GHSA-v475-xhc9-wfxg
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
Critical9.8Known exploitedNo fix yetVendor product - CVE-2024-3094GHSA-rxwq-x6h5-x525
Xz: malicious code in distributed source
Critical10.0No fix yetGit repositories - CVE-2024-26624GHSA-5436-7p32-x65c
In the Linux kernel, the following vulnerability has been resolved: af_unix: fix lockdep positiv...
UnscoredFix status unknownWithdrawn - CVE-2024-26581GHSA-92f7-c7hw-58cr
netfilter: nft_set_rbtree: skip end interval element from gc
High7.8Fix availableLinux - CVE-2024-1086GHSA-gfh2-2mj9-m2cx
Use-after-free in Linux kernel's netfilter: nf_tables component
High7.8Known exploitedFix availableGit repositories - CVE-2023-4966GHSA-2g42-2pwg-93cj
Unauthenticated sensitive information disclosure
Critical9.4Known exploitedNo fix yetVendor product - CVE-2023-44487GHSA-qppj-fm5r-hxr3
HTTP/2 Stream Cancellation Attack
Medium6.9Known exploitedFix availableSwift+2 - CVE-2023-45613GHSA-2fvw-ppfc-cm77
In JetBrains Ktor before 2.3.5 server certificates were not verified
Medium6.8Fix availableGit repositories - CVE-2023-3635GHSA-w33c-445m-f8w7
Okio Signed to Unsigned Conversion Error vulnerability
Medium5.9Fix availableMaven - CVE-2021-4422GHSA-7qhm-w96c-j5vq
POST SMTP Mailer <= 2.0.20 - Cross-Site Request Forgery Bypass
Medium4.3No fix yetGit repositories - CVE-2020-23064GHSA-257q-pv89-v3xv
Duplicate Advisory: jQuery Cross Site Scripting vulnerability
Medium6.1Fix availablenpm+3Withdrawn - CVE-2022-25883GHSA-c2qf-rxjj-qqgw
semver vulnerable to Regular Expression Denial of Service
High7.5Fix availablenpm - CVE-2023-34362GHSA-hq22-q5g8-577g
In Progress MOVEit Transfer before 2021.0.6 (13.0.6), 2021.1.4 (13.1.4), 2022.0.4 (14.0.4), 2022....
Critical9.8Known exploitedFix status unknown - CVE-2023-34339GHSA-w2c4-vpgj-g3jp
In JetBrains Ktor before 2.3.1 headers containing authentication data could be added to the excep...
Low3.3Fix availableGit repositories - GHSA-4q83-7cq4-p6wg
`tokio::io::ReadHalf<T>::unsplit` is Unsound
LowFix availablecrates.io (Rust) - CVE-2022-42889GHSA-599f-7c49-w659
Arbitrary code execution in Apache Commons Text
Critical9.8Fix availableMaven - CVE-2024-21907GHSA-5crp-9r3c-p9vr
Improper Handling of Exceptional Conditions in Newtonsoft.Json
High7.5Fix availableNuGet - CVE-2022-22965GHSA-36p3-wjmg-h94x
Remote Code Execution in Spring Framework
Critical9.8Known exploitedFix availableMaven - CVE-2022-24329GHSA-2qp4-g3q3-f92w
Improper Locking in JetBrains Kotlin
Medium5.3Fix availableMaven