Medium
CVE-2024-55890
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,405
Medium
CVE-2024-56326
Jinja has a sandbox breakout through indirect reference to format method
Medium
CVE-2024-53865
Python package "zhmcclient" stores passwords in clear text in its HMC and API logs
High
CVE-2024-53981
Denial of service (DoS) via deformation `multipart/form-data` boundary
Low
CVE-2024-53861
PyJWT Issuer field partial matches allowed
High
CVE-2024-39163
pyspider Cross-Site Request Forgery (CSRF) via the Flask endpoints
Medium
CVE-2024-53999
Mobile Security Framework (MobSF) Stored Cross-Site Scripting Vulnerability in "Diff or Compare" Functionality
High
CVE-2024-52815
Synapse allows a a malformed invite to break the invitee's `/sync`
Medium
CVE-2024-53867
Synapse Matrix has a partial room state leak via Sliding Sync
High
CVE-2024-53863
Synapse can be forced to thumbnail unexpected file formats, invoking external, potentially untrustworthy decoders
High
CVE-2024-52805
Synapse allows unsupported content types to lead to memory exhaustion
High
CVE-2024-52804
Tornado has an HTTP cookie parsing DoS vulnerability
Medium
CVE-2024-39162
pyspider Cross-site Scripting vulnerability
Medium
CVE-2024-53848
check-jsonschema default caching for remote schemas allows for cache confusion
Medium
CVE-2024-53916
OpenStack Neutron can use an incorrect ID during policy enforcement
High
CVE-2024-52803
LLama Factory Remote OS Command Injection Vulnerability
Medium
CVE-2024-52787
libre-chat Path Traversal vulnerability
Low
CVE-2024-52008
Password Policy Bypass Vulnerability in Fides Webserver User Accept Invite API
Medium
CVE-2024-11406
django CMS Attributes Field Cross-site Scripting
Medium
CVE-2024-11404
Django Filer Unrestricted Upload of File with Dangerous Type
Medium
CVE-2024-52304
aiohttp allows request smuggling due to incorrect parsing of chunk extensions
Medium
CVE-2024-52303
aiohttp has a memory leak when middleware is enabled when requesting a resource with a non-allowed method
Low
CVE-2024-50378
Apache Airflow vulnerable to Insertion of Sensitive Information Into Sent Data
Medium
CVE-2023-6110
OpenStack improperly deletes access rules
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.