Mittel
CVE-2023-46137
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 4.335
Filter zurücksetzen
Mittel
CVE-2023-46136
Werkzeug DoS: High resource usage when parsing multipart/form-data containing a large part with CR/LF character at the beginning
Hoch
CVE-2023-46128
Nautobot vulnerable to exposure of hashed user passwords via REST API
Mittel
CVE-2023-46288
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Airflow.This issue affects Apache Airflow from 2.4.0 to 2.7.0.
Mittel
CVE-2023-46332
WebAssembly wabt 1.0.33 contains an Out-of-Bound Memory Write in DataSegment::Drop(), which lead to segmentation fault.
Mittel
CVE-2021-46897
views.py in Wagtail CRX CodeRed Extensions (formerly CodeRed CMS or coderedcms) before 0.22.3 allows upward protected/..%2f..%2f path traversal when serving protected media.
Kritisch
CVE-2023-32785
Langchain SQL Injection vulnerability
Mittel
CVE-2023-41893
Home Assistant vulnerable to account takeover via auth_callback login
Niedrig
CVE-2023-45809
Wagtail vulnerable to disclosure of user names via admin bulk action views
Hoch
CVE-2023-46229
LangChain before 0.0.317 allows SSRF via document_loaders/recursive_url_loader.py because crawling can proceed from an external server to an internal server.
Mittel
CVE-2023-42792
Apache Airflow, in versions prior to 2.7.2, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could give the user write acce
Mittel
CVE-2023-42663
Apache Airflow, versions before 2.7.2, has a vulnerability that allows an authorized user who has access to read specific DAGs only, to read information about task instances in other DAGs.
Mittel
CVE-2023-42780
Apache Airflow, versions prior to 2.7.2, contains a security vulnerability that allows authenticated users of Airflow to list warnings for all DAGs, even if the user had no permission to see those DAG
Mittel
CVE-2023-45348
Apache Airflow, versions 2.7.0 and 2.7.1, is affected by a vulnerability that allows an authenticated user to retrieve sensitive configuration information when the "expose_config" option is set to "no
Mittel
CVE-2023-41882
Improper Access Control in vantage6
Kritisch
CVE-2023-44467
langchain_experimental 0.0.14 allows an attacker to bypass the CVE-2023-36258 fix and execute arbitrary code via the PALChain in the python exec method.
Hoch
CVE-2023-41047
OctoPrint vulnerable to Improper Neutralization of Special Elements Used in a Template Engine
Hoch
ghsa-f9pm-4g9p-6vm3
Bundled libwebp in pywebp vulnerable
Niedrig
CVE-2023-44389
Zope management interface vulnerable to stored cross site scripting via the title property
Kritisch
ghsa-4mqg-h5jf-j9m7
TorchServe Pre-Auth Remote Code Execution
Hoch
CVE-2023-39410
Apache Avro Java SDK vulnerable to Improper Input Validation
Niedrig
CVE-2023-41335
matrix-synapse vulnerable to temporary storage of plaintext passwords during password changes
Niedrig
ghsa-hc5c-r8m5-2gfh
plone.restapi vulnerable to Stored Cross Site Scripting with SVG image in user portrait
Mittel
CVE-2023-41048
plone.namedfile allows users to handle `File` and `Image` fields targeting, but not depending on, Plone Dexterity content. Prior to versions 5.6.1, 6.0.3, 6.1.3, and 6.2.1, there is a stored cross sit
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.