Hoch
CVE-2023-25577
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 6.855
Filter zurücksetzen
Niedrig
CVE-2023-23934
Incorrect parsing of nameless cookies leads to __Host- cookies bypass
Hoch
ghsa-344m-qcjq-xgrf
Vulnerable OpenSSL included in sgx-dcap-quote-verify-python
Kritisch
CVE-2023-0777
Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4.
Niedrig
CVE-2023-24816
IPython vulnerable to command injection via set_term_title
Mittel
CVE-2022-47419
Mayan EDMS DMS XSS vulnerability
Mittel
CVE-2023-23931
Cipher.update_into can corrupt memory if passed an immutable python object as the outbuf
Mittel
CVE-2020-36660
A vulnerability was found in paxswill EVE Ship Replacement Program 0.12.11. It has been rated as problematic. This issue affects some unknown processing of the file src/evesrp/views/api.py of the comp
Hoch
CVE-2022-45786
Apache AGE: Python and Golang drivers allow data manipulation and exposure due to SQL injection
Kritisch
CVE-2019-25101
Header injection in TurboGears
Mittel
CVE-2023-23940
OpenZeppelin Contracts contains Improper Verification of Cryptographic Signature
Hoch
CVE-2023-23969
In Django 3.2 before 3.2.17, 4.0 before 4.0.9, and 4.1 before 4.1.6, the parsed values of Accept-Language headers are cached in order to avoid repetitive parsing. This leads to a potential denial-of-s
Mittel
CVE-2023-0591
ubireader_extract_files is vulnerable to path traversal when run against specifically crafted UBIFS files, allowing the attacker to overwrite files outside of the extraction directory (provided the pr
Nicht bewertet
CVE-2023-24829
Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component from 0.13.0 before 0.13.3. iotdb-web-workbench is an optional comp
Hoch
CVE-2021-4315
A vulnerability has been found in NYUCCL psiTurk up to 3.2.0 and classified as critical. This vulnerability affects unknown code of the file psiturk/experiment.py. The manipulation of the argument mod
Mittel
CVE-2023-24622
isInList in the safeurl-python package before 1.2 for Python has an insufficiently restrictive regular expression for external domains, leading to SSRF.
Mittel
CVE-2022-47951
OpenStack Cinder, glance, and Nova vulnerable to Path Traversal
Mittel
CVE-2023-0470
Cross-site Scripting (XSS) - Stored in GitHub repository modoboa/modoboa prior to 2.0.4.
Mittel
CVE-2023-0519
Cross-site Scripting (XSS) - Stored in GitHub repository modoboa/modoboa prior to 2.0.4.
Hoch
CVE-2022-25882
Versions of the package onnx before 1.13.0 are vulnerable to Directory Traversal as the external_data field of the tensor proto can have a path to the file which is outside the model current directory
Niedrig
CVE-2023-23611
LTI 1.3 Grade Pass Back Implementation has Missing Authorization Vulnerability
Nicht bewertet
pysec-2023-1
Adyen has utility methods for validating notification HMAC signatures. The is_valid_hmac and is_valid_hmac_notification methods are vulnerable to a timing attack, you should compare the hash of the HM
Mittel
CVE-2023-0438
Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4.
Kritisch
CVE-2023-0435
Excessive Attack Surface in pyload-ng
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.