Low
CVE-2024-45033
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Low
CVE-2024-55655
sigstore has insufficient validation of integration timestamp during verification
Medium
CVE-2024-9774
python-sql SQL injection vulnerability
Medium
CVE-2024-56142
PGHoard Path Traversal vulnerability
High
CVE-2024-55587
python-libarchive directory traversal
High
CVE-2024-12745
Amazon Redshift Python Connector vulnerable to SQL Injection
Medium
CVE-2024-9427
Koji Cross-site Scripting
High
CVE-2024-56327
pyrage vulnerable to malicious plugin names, recipients, or identities causing arbitrary binary execution
Medium
CVE-2024-56201
Jinja has a sandbox breakout through malicious filenames
Medium
CVE-2024-55890
D-Tale allows Remote Code Execution through the Custom Filter Input
Medium
CVE-2024-56326
Jinja has a sandbox breakout through indirect reference to format method
Medium
CVE-2024-53865
Python package "zhmcclient" stores passwords in clear text in its HMC and API logs
High
CVE-2024-53981
Denial of service (DoS) via deformation `multipart/form-data` boundary
Low
CVE-2024-53861
PyJWT Issuer field partial matches allowed
High
CVE-2024-39163
pyspider Cross-Site Request Forgery (CSRF) via the Flask endpoints
Medium
CVE-2024-53999
Mobile Security Framework (MobSF) Stored Cross-Site Scripting Vulnerability in "Diff or Compare" Functionality
High
CVE-2024-52815
Synapse allows a a malformed invite to break the invitee's `/sync`
Medium
CVE-2024-53867
Synapse Matrix has a partial room state leak via Sliding Sync
High
CVE-2024-53863
Synapse can be forced to thumbnail unexpected file formats, invoking external, potentially untrustworthy decoders
High
CVE-2024-52805
Synapse allows unsupported content types to lead to memory exhaustion
High
CVE-2024-52804
Tornado has an HTTP cookie parsing DoS vulnerability
Medium
CVE-2024-39162
pyspider Cross-site Scripting vulnerability
Medium
CVE-2024-53848
check-jsonschema default caching for remote schemas allows for cache confusion
Medium
CVE-2024-53916
OpenStack Neutron can use an incorrect ID during policy enforcement
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.