Mittel
CVE-2023-40015
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 6.855
Filter zurücksetzen
Kritisch
CVE-2023-39631
An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary code via the evaluate function in the numexpr library.
Mittel
CVE-2023-41040
GitPython blind local file inclusion
Hoch
CVE-2023-41039
Sandbox escape via various forms of "format".
Mittel
CVE-2023-36811
Archive spoofing vulnerability in borgbackup
Kritisch
CVE-2023-40889
Heap-based buffer overflow in ZBar
Mittel
CVE-2023-40170
cross-site inclusion (XSSI) of files in jupyter-server
Mittel
CVE-2023-39968
Open Redirect Vulnerability in jupyter-server
Hoch
CVE-2023-40590
GitPython untrusted search path on Windows systems leading to arbitrary code execution
Hoch
CVE-2023-40195
Deserialization of Untrusted Data, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Software Foundation Apache Airflow Spark Provider.
Hoch
CVE-2023-38201
Keylime registrar and (untrusted) Agent can be bypassed by an attacker
Mittel
CVE-2023-40570
Datasette 1.0 alpha series leaks names of databases and tables to unauthenticated users
Hoch
CVE-2023-40017
GeoNode Server Side Request forgery
Mittel
CVE-2023-39441
Apache Airflow missing Certificate Validation
Hoch
CVE-2023-37379
Apache Airflow, in versions prior to 2.7.0, contains a security vulnerability that can be exploited by an authenticated user possessing Connection edit privileges. This vulnerability allows the user t
Hoch
CVE-2023-40273
The session fixation vulnerability allowed the authenticated user to continue accessing Airflow webserver even after the password of the user has been reset by the admin - up until the expiry of the s
Hoch
CVE-2022-25024
The json2xml package through 3.12.0 for Python allows an error in typecode decoding enabling a remote attack that can lead to an exception, causing a denial of service.
Kritisch
CVE-2023-36281
An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via the via the a json file to the load_prompt parameter.
Mittel
CVE-2022-45582
Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1.4 via the success_url parameter.
Hoch
CVE-2020-18831
Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file.
Kritisch
CVE-2023-39661
PandasAI vulnerable to arbitrary code execution
Kritisch
CVE-2023-39662
An issue in llama_index v.0.7.13 and before allows a remote attacker to execute arbitrary code via the `exec` parameter in PandasQueryEngine function.
Kritisch
CVE-2023-38896
An issue in Harrison Chase langchain v.0.0.194 and before allows a remote attacker to execute arbitrary code via the from_math_prompt and from_colored_object_prompt functions.
Kritisch
CVE-2023-39659
An issue in langchain langchain-ai v.0.0.232 and before allows a remote attacker to execute arbitrary code via a crafted script to the PythonAstREPLTool._run component.
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.