Medium
CVE-2023-41052
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,856
Reset filters
Medium
CVE-2023-40015
Vyper: reversed order of side effects for some operations
Critical
CVE-2023-39631
An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary code via the evaluate function in the numexpr library.
Medium
CVE-2023-41040
GitPython blind local file inclusion
High
CVE-2023-41039
Sandbox escape via various forms of "format".
Medium
CVE-2023-36811
Archive spoofing vulnerability in borgbackup
Critical
CVE-2023-40889
Heap-based buffer overflow in ZBar
Medium
CVE-2023-40170
cross-site inclusion (XSSI) of files in jupyter-server
Medium
CVE-2023-39968
Open Redirect Vulnerability in jupyter-server
High
CVE-2023-40590
GitPython untrusted search path on Windows systems leading to arbitrary code execution
High
CVE-2023-40195
Deserialization of Untrusted Data, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Software Foundation Apache Airflow Spark Provider.
High
CVE-2023-38201
Keylime registrar and (untrusted) Agent can be bypassed by an attacker
Medium
CVE-2023-40570
Datasette 1.0 alpha series leaks names of databases and tables to unauthenticated users
High
CVE-2023-40017
GeoNode Server Side Request forgery
Medium
CVE-2023-39441
Apache Airflow missing Certificate Validation
High
CVE-2023-37379
Apache Airflow, in versions prior to 2.7.0, contains a security vulnerability that can be exploited by an authenticated user possessing Connection edit privileges. This vulnerability allows the user t
High
CVE-2023-40273
The session fixation vulnerability allowed the authenticated user to continue accessing Airflow webserver even after the password of the user has been reset by the admin - up until the expiry of the s
High
CVE-2022-25024
The json2xml package through 3.12.0 for Python allows an error in typecode decoding enabling a remote attack that can lead to an exception, causing a denial of service.
Critical
CVE-2023-36281
An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via the via the a json file to the load_prompt parameter.
Medium
CVE-2022-45582
Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1.4 via the success_url parameter.
High
CVE-2020-18831
Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file.
Critical
CVE-2023-39661
PandasAI vulnerable to arbitrary code execution
Critical
CVE-2023-39662
An issue in llama_index v.0.7.13 and before allows a remote attacker to execute arbitrary code via the `exec` parameter in PandasQueryEngine function.
Critical
CVE-2023-38896
An issue in Harrison Chase langchain v.0.0.194 and before allows a remote attacker to execute arbitrary code via the from_math_prompt and from_colored_object_prompt functions.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.