Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 9:9 a.m.1 views

CVE-2024-21645

pyLoad is the free and open-source Download Manager written in pure Python. A log injection vulnerability was identified in pyload allowing any unauthenticated actor to inject arbitrary messages into the logs gathered by pyload. Forged or otherwise, corrupted log files can be used to cover an...

5.3CVSS5.8AI score0.73382EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 11:0 a.m.9 views

CVE-2024-21644

pyLoad is the free and open-source Download Manager written in pure Python. Any unauthenticated user can browse to a specific URL to expose the Flask config, including the SECRETKEY variable. This issue has been patched in version 0.5.0b3.dev77...

7.5CVSS6.8AI score0.86508EPSS
Exploits1References1
NVD
NVD
added 2024/01/08 2:15 p.m.12 views

CVE-2024-21645

pyLoad is the free and open-source Download Manager written in pure Python. A log injection vulnerability was identified in pyload allowing any unauthenticated actor to inject arbitrary messages into the logs gathered by pyload. Forged or otherwise, corrupted log files can be used to cover an...

5.3CVSS5.4AI score0.73382EPSS
Exploits1References2
NVD
NVD
added 2024/01/08 2:15 p.m.11 views

CVE-2024-21644

pyLoad is the free and open-source Download Manager written in pure Python. Any unauthenticated user can browse to a specific URL to expose the Flask config, including the SECRETKEY variable. This issue has been patched in version 0.5.0b3.dev77...

7.5CVSS7.5AI score0.86508EPSS
Exploits1References2
Prion
Prion
added 2024/01/08 2:15 p.m.11 views

Design/Logic Flaw

pyLoad is the free and open-source Download Manager written in pure Python. Any unauthenticated user can browse to a specific URL to expose the Flask config, including the SECRETKEY variable. This issue has been patched in version 0.5.0b3.dev77...

5CVSS7.2AI score0.86508EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2024/01/08 1:20 p.m.13 views

CVE-2024-21645 pyLoad Log Injection

pyLoad is the free and open-source Download Manager written in pure Python. A log injection vulnerability was identified in pyload allowing any unauthenticated actor to inject arbitrary messages into the logs gathered by pyload. Forged or otherwise, corrupted log files can be used to cover an...

5.3CVSS5.8AI score0.73382EPSS
Exploits1References4
Cvelist
Cvelist
added 2024/01/08 1:20 p.m.12 views

CVE-2024-21645 pyLoad Log Injection

pyLoad is the free and open-source Download Manager written in pure Python. A log injection vulnerability was identified in pyload allowing any unauthenticated actor to inject arbitrary messages into the logs gathered by pyload. Forged or otherwise, corrupted log files can be used to cover an...

5.3CVSS5.7AI score0.73382EPSS
Exploits1References2
Rows per page
Query Builder