Medium
CVE-2024-53865
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,358
Reset filters
High
CVE-2024-53981
Denial of service (DoS) via deformation `multipart/form-data` boundary
Low
CVE-2024-53861
PyJWT Issuer field partial matches allowed
High
CVE-2024-39163
pyspider Cross-Site Request Forgery (CSRF) via the Flask endpoints
Medium
CVE-2024-53999
Mobile Security Framework (MobSF) Stored Cross-Site Scripting Vulnerability in "Diff or Compare" Functionality
High
CVE-2024-52815
Synapse allows a a malformed invite to break the invitee's `/sync`
Medium
CVE-2024-53867
Synapse Matrix has a partial room state leak via Sliding Sync
High
CVE-2024-53863
Synapse can be forced to thumbnail unexpected file formats, invoking external, potentially untrustworthy decoders
High
CVE-2024-52805
Synapse allows unsupported content types to lead to memory exhaustion
Medium
CVE-2024-39162
pyspider Cross-site Scripting vulnerability
Medium
CVE-2024-53848
check-jsonschema default caching for remote schemas allows for cache confusion
High
CVE-2024-52803
LLama Factory Remote OS Command Injection Vulnerability
Low
CVE-2024-52008
Password Policy Bypass Vulnerability in Fides Webserver User Accept Invite API
Medium
CVE-2024-52304
aiohttp allows request smuggling due to incorrect parsing of chunk extensions
Medium
CVE-2024-52303
aiohttp has a memory leak when middleware is enabled when requesting a resource with a non-allowed method
Low
CVE-2024-50378
Apache Airflow vulnerable to Insertion of Sensitive Information Into Sent Data
Medium
CVE-2023-34049
Salt preflight script could be attacker controlled
Medium
CVE-2021-3986
Generation of Error Message Containing Sensitive Information in janeczku/calibre-web
High
CVE-2024-51998
changedetection.io path traversal using file URI scheme without supplying hostname
Medium
CVE-2024-52524
ReDoS in giskard's transformation.py (GHSL-2024-324)
Medium
CVE-2024-9902
ansible-core Incorrect Authorization vulnerability
Medium
CVE-2024-49767
Werkzeug possible resource exhaustion when parsing file data in forms
Medium
CVE-2024-10073
Flair allows arbitrary code execution
Medium
CVE-2024-51483
changedetection.io Path Traversal
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.