Niedrig
ghsa-v8gr-m533-ghj9
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 4.335
Filter zurücksetzen
Hoch
CVE-2023-42457
plone.rest allows users to use HTTP verbs such as GET, POST, PUT, DELETE, etc. in Plone. Starting in the 2.x branch and prior to versions 2.0.1 and 3.0.1, when the `++api++` traverser is accidentally
Hoch
CVE-2023-42443
Vyper vulnerable to memory corruption in certain builtins utilizing `msize`
Mittel
CVE-2023-41885
Piccolo's current `BaseUser.login` implementation is vulnerable to time based user enumeration
Hoch
CVE-2023-40712
Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authenticated users who have access to see the task/dag in the UI, to craft a URL, which could lead to unmasking the s
Mittel
CVE-2023-40611
Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authenticated and DAG-view authorized Users to modify some DAG run detail values when submitting notes. This could hav
Mittel
CVE-2023-37941
Apache Superset Deserialization of Untrusted Data vulnerability
Mittel
CVE-2023-20897
Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return. After receiving several bad packets on the request server equal to the number of worker threads, the master will become unrespons
Kritisch
CVE-2023-39631
An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary code via the evaluate function in the numexpr library.
Mittel
CVE-2023-41040
GitPython blind local file inclusion
Hoch
CVE-2023-41039
Sandbox escape via various forms of "format".
Mittel
CVE-2023-36811
Archive spoofing vulnerability in borgbackup
Mittel
CVE-2023-40170
cross-site inclusion (XSSI) of files in jupyter-server
Mittel
CVE-2023-39968
Open Redirect Vulnerability in jupyter-server
Hoch
CVE-2023-40590
GitPython untrusted search path on Windows systems leading to arbitrary code execution
Hoch
CVE-2023-40195
Deserialization of Untrusted Data, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Software Foundation Apache Airflow Spark Provider.
Hoch
CVE-2023-38201
Keylime registrar and (untrusted) Agent can be bypassed by an attacker
Hoch
CVE-2023-40017
GeoNode Server Side Request forgery
Mittel
CVE-2023-39441
Apache Airflow missing Certificate Validation
Hoch
CVE-2023-37379
Apache Airflow, in versions prior to 2.7.0, contains a security vulnerability that can be exploited by an authenticated user possessing Connection edit privileges. This vulnerability allows the user t
Hoch
CVE-2023-40273
The session fixation vulnerability allowed the authenticated user to continue accessing Airflow webserver even after the password of the user has been reset by the admin - up until the expiry of the s
Kritisch
CVE-2023-36281
An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via the via the a json file to the load_prompt parameter.
Kritisch
CVE-2023-39661
PandasAI vulnerable to arbitrary code execution
Kritisch
CVE-2023-38896
An issue in Harrison Chase langchain v.0.0.194 and before allows a remote attacker to execute arbitrary code via the from_math_prompt and from_colored_object_prompt functions.
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.