10145 matches found
CVE-2024-6866
corydolphin/flask-cors version 4.01 contains a vulnerability where the request path matching is case-insensitive due to the use of the trymatch function, which is originally intended for matching hosts. This results in a mismatch because paths in URLs are case-sensitive, but the regex matching...
CVE-2024-10096
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2024-6839
corydolphin/flask-cors version 4.0.1 contains an improper regex path matching vulnerability. The plugin prioritizes longer regex patterns over more specific ones when matching paths, which can lead to less restrictive CORS policies being applied to sensitive endpoints. This mismatch in regex...
CVE-2024-7776
A vulnerability in the downloadmodel function of the onnx/onnx framework, before and including version 1.16.1, allows for arbitrary file overwrite due to inadequate prevention of path traversal attacks in malicious tar files. This vulnerability can be exploited by an attacker to overwrite files i...
CVE-2024-6827
Gunicorn version 21.2.0 does not properly validate the value of the 'Transfer-Encoding' header as specified in the RFC standards, which leads to the default fallback method of 'Content-Length,' making it vulnerable to TE.CL request smuggling. This vulnerability can lead to cache poisoning, data...
CVE-2016-1405 vulnerabilities
Vulnerabilities for packages: clamav...
GHSA-P4QJ-763M-FFG3 vulnerabilities
Vulnerabilities for packages: clamav...
CVE-2024-9880
Removed by vendor...
CVE-2025-25724 vulnerabilities
Vulnerabilities for packages: libarchive...
CVE-2024-57970 vulnerabilities
Vulnerabilities for packages: libarchive...
CVE-2025-1632 vulnerabilities
Vulnerabilities for packages: libarchive...
CVE-2021-36230 vulnerabilities
Vulnerabilities for packages: terraform, terragrunt...
GHSA-V2MW-5MCH-W8C5 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
GHSA-2Q66-6W43-8RM9 vulnerabilities
Vulnerabilities for packages: libarchive...
GHSA-CW9M-PJ72-3CJ5 vulnerabilities
Vulnerabilities for packages: libarchive...
CVE-2025-29787 vulnerabilities
Vulnerabilities for packages: geckodriver, pixi, wasm-pack, deno, nushell...
GHSA-M4GQ-FM9H-8Q75 vulnerabilities
Vulnerabilities for packages: kubescape, docker-compose...
CVE-2020-36843 vulnerabilities
Vulnerabilities for packages: gradle, jenkins, thingsboard...