Mittel
ghsa-8c6x-g4fw-8rf4
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 4.334
Filter zurücksetzen
Mittel
CVE-2023-36830
SQLFluff users with access to config file, using `libary_path` may call arbitrary python code
Hoch
CVE-2023-36189
SQL injection vulnerability in langchain v.0.0.64 allows a remote attacker to obtain sensitive information via the SQLDatabaseChain component.
Kritisch
CVE-2023-36188
langchain vulnerable to arbitrary code execution
Hoch
CVE-2023-36827
ethyca-fides Webserver API Path Traversal vulnerability
Hoch
CVE-2023-34457
MechanicalSoup vulnerable to malicious web server reading arbitrary files on client using file input inside HTML form
Kritisch
CVE-2023-36258
An issue in langchain v.0.0.199 allows an attacker to execute arbitrary code via the PALChain in the python exec method.
Hoch
CVE-2023-36814
Products.CMFCore unauthenticated denial of service and crash via unchecked use of input with Python's marshal module
Hoch
CVE-2023-36053
In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS (regular expression denial of service) attack via a very large numb
Kritisch
CVE-2023-35797
Apache Airflow Hive Provider Beeline remote code execution with Principal
Hoch
CVE-2020-26708
requests-xml v0.2.3 was discovered to contain an XML External Entity Injection (XXE) vulnerability which allows attackers to execute arbitrary code via a crafted XML file.
Hoch
CVE-2020-26710
easy-parse v0.1.1 was discovered to contain a XML External Entity Injection (XXE) vulnerability which allows attackers to execute arbitrary code via a crafted XML file.
Hoch
CVE-2020-26709
py-xml v1.0 was discovered to contain an XML External Entity Injection (XXE) vulnerability which allows attackers to execute arbitrary code via a crafted XML file.
Niedrig
ghsa-373w-rj84-pv6x
SafeURL-Python's hostname blocklist does not block FQDNs
Mittel
CVE-2023-35798
Apache Airflow ODBC Provider, Apache Airflow MSSQL Provider Improper Input Validation vulnerability
Kritisch
ghsa-hj8m-9fhf-v7jp
fief-server Server-Side Template Injection vulnerability
Mittel
CVE-2023-34110
Flask-AppBuilder vulnerable to possible disclosure of sensitive information on user error
Kritisch
CVE-2023-34541
Langchain 0.0.171 is vulnerable to Arbitrary code execution in load_prompt.
Hoch
CVE-2023-35005
In Apache Airflow, some potentially sensitive values were being shown to the user in certain situations.
Kritisch
CVE-2023-34540
Langchain 0.0.171 is vulnerable to Arbitrary Code Execution.
Mittel
CVE-2023-32683
Synapse has URL deny list bypass via oEmbed and image URLs when generating previews
Niedrig
ghsa-5cpq-8wj7-hf2v
Vulnerable OpenSSL included in cryptography wheels
Mittel
CVE-2023-29159
Starlette has Path Traversal vulnerability in StaticFiles
Niedrig
CVE-2023-33185
Incorrect signature verification in django-ses
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.