Hoch
CVE-2022-36069
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 4.333
Filter zurücksetzen
Hoch
CVE-2022-31152
Denial of service due to incorrect application of event authorization rules
Mittel
CVE-2022-38170
Apache Airflow exposes arbitrary file content
Kritisch
CVE-2022-38054
Apache Airflow Session Fixation vulnerability
Kritisch
CVE-2022-39227
python-jwt vulnerable to token forgery with new claims
Mittel
CVE-2022-0718
python-oslo-utils has improper password parsing
Kritisch
CVE-2022-34668
NVFLARE unsafe deserialization due to Pickle
Kritisch
CVE-2021-3563
Openstack Keystone Incorrect Authorization vulnerability
Nicht bewertet
pysec-2022-252
The deep-translator project on PyPI was taken over via user account compromise via a phishing attack and a new malicious release made which contained code which some environment variables and download
Nicht bewertet
pysec-2022-251
The spam project on PyPI was taken over via user account compromise via a phishing attack and a new malicious release made which contained code which some environment variables and downloaded and ran
Nicht bewertet
pysec-2022-250
The exotel project on PyPI was taken over via user account compromise via a phishing attack and a new malicious release made which contained code which some environment variables and downloaded and ra
Mittel
CVE-2021-32862
nbconvert vulnerable to cross-site scripting (XSS) via multiple exploit paths
Hoch
CVE-2022-36024
Bots using py-cord as Discord API wrapper are vulnerable to shutdowns through remote code execution
Hoch
ghsa-pcjh-6r5h-r92r
django-sendfile2 before 0.7.0 contains reflected file download vulnerability
Mittel
ghsa-7r9x-qrpr-3cxw
mofh Vulnerable to Improper Restriction of XML External Entity Reference
Hoch
CVE-2022-36124
It is possible for a Reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system. This issue affects Rust applications using Apache Avro Rust SDK prior to 0.14
Niedrig
CVE-2022-31177
Flask-AppBuilder before v4.1.3 allows inference of sensitive information through query strings
Mittel
ghsa-9x8m-2xpf-crp3
Scrapy before 2.6.2 and 1.8.3 vulnerable to one proxy sending credentials to another
Hoch
CVE-2022-36447
chia-blockchain tokens can be inflated to an arbitrary extent
Mittel
CVE-2022-34529
WASM3 v0.5.0 was discovered to contain a segmentation fault via the component Compile_Memory_CopyFill.
Hoch
CVE-2022-34749
Mistune vulnerable to catastrophic backtracking
Mittel
CVE-2022-2514
The time and filter parameters in Fava prior to v1.22 are vulnerable to reflected XSS due to the lack of escaping of error messages which contained the parameters in verbatim.
Mittel
CVE-2022-30187
Microsoft: CBC Padding Oracle in Azure Blob Storage Encryption Library
Mittel
CVE-2022-25303
Whoogle Search Cross-site Scripting via string parameter
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.