Hoch
CVE-2023-46446
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 733
Filter zurücksetzen
Mittel
CVE-2023-46445
AsyncSSH Rogue Extension Negotiation
Hoch
CVE-2023-47117
Label Studio Object Relational Mapper Leak Vulnerability in Filtering Task
Mittel
ghsa-8c6x-g4fw-8rf4
Whatsapp-Chat-Exporter has Cross-Site Scripting vulnerability in HTML output of chats.
Kritisch
ghsa-hj8m-9fhf-v7jp
fief-server Server-Side Template Injection vulnerability
Hoch
CVE-2023-34233
Snowflake Python Connector vulnerable to Command Injection
Hoch
ghsa-cpmr-mw4j-99r7
Nginx alias path traversal allows unauthenticated attackers to read all files on /label_studio/core/
Mittel
CVE-2023-27494
Streamlit publishes previously-patched Cross-site Scripting vulnerability
Hoch
CVE-2023-27476
OWSLib vulnerable to XML External Entity (XXE) Injection
Mittel
CVE-2023-24769
Changedetection.io before v0.40.1.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the main page. This vulnerability allows attackers to execute arbitrary web scripts o
Mittel
CVE-2023-0591
ubireader_extract_files is vulnerable to path traversal when run against specifically crafted UBIFS files, allowing the attacker to overwrite files outside of the extraction directory (provided the pr
Mittel
CVE-2022-31777
A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a mal
Mittel
CVE-2021-32862
nbconvert vulnerable to cross-site scripting (XSS) via multiple exploit paths
Hoch
CVE-2022-29241
Jupyter server Token bruteforcing
Mittel
CVE-2021-3313
Plone CMS until version 5.2.4 has a stored Cross-Site Scripting (XSS) vulnerability in the user fullname property and the file upload functionality. The user's input data is not properly encoded when
Kritisch
CVE-2020-22083
** DISPUTED ** jsonpickle through 1.4.1 allows remote code execution during deserialization of a malicious payload through the decode() function. Note: It has been argued that this is expected and cle
Hoch
CVE-2022-1432
Cross-site Scripting in OctoPrint
Kritisch
CVE-2022-28347
SQL Injection in Django
Kritisch
CVE-2022-0766
Server-Side Request Forgery in calibreweb
Hoch
CVE-2022-21668
Pipenv's requirements.txt parsing allows malicious index url in comments
Mittel
CVE-2021-43837
vault-cli contains possible RCE when reading user-defined data
Mittel
CVE-2021-25986
Cross-site Scripting in django-wiki
Hoch
CVE-2021-25962
CSV injection in shuup
Hoch
CVE-2021-37678
Arbitrary code execution due to YAML deserialization
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.