Critical
CVE-2023-39659
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,856
Reset filters
Critical
CVE-2023-38860
An issue in LangChain v.0.0.231 allows a remote attacker to execute arbitrary code via the prompt parameter.
Medium
CVE-2023-54397
Tornado vulnerable to HTTP request smuggling via improper parsing of `Content-Length` fields and chunk lengths
High
CVE-2023-39553
apache-airflow-providers-apache-drill Improper Input Validation vulnerability
Critical
CVE-2023-40267
GitPython vulnerable to remote code execution due to insufficient sanitization of input arguments
Medium
CVE-2023-27506
Authenticated Local Privilege Escalation vulnerability in Intel Optimization for Tensorflow
Medium
CVE-2023-35838
The WireGuard client 0.5.3 on Windows insecurely configures the operating system and firewall such that traffic to a local network that uses non-RFC1918 IP addresses is blocked. This allows an adversa
High
CVE-2023-38759
Cross Site Request Forgery (CSRF) vulnerability in wger Project wger Workout Manager 2.2.0a3 allows a remote attacker to gain privileges via the user-management feature in the gym/views/gym.py, templa
Medium
CVE-2023-38758
Cross Site Scripting vulnerability in wger Project wger Workout Manager v.2.2.0a3 allows a remote attacker to gain privileges via the license_author field in the add-ingredient function in the templat
Critical
CVE-2023-39363
Vyper has incorrectly allocated named re-entrancy locks
High
CVE-2023-39508
Execution with Unnecessary Privileges, : Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache Airflow.The "Run Task" feature enables authentica
Critical
CVE-2023-36095
An issue in Harrison Chase langchain v.0.0.194 allows an attacker to execute arbitrary code via the python exec calls in the PALChain, affected functions include from_math_prompt and from_colored_obje
Critical
CVE-2023-38699
MindsDB can be made to not verify SSL certificates
Critical
CVE-2023-38686
Sydent does not verify email server certificates
High
CVE-2023-37920
Removal of e-Tugra root certificate
Low
ghsa-jm77-qphf-c4w8
pyca/cryptography's wheels include vulnerable OpenSSL
High
CVE-2023-4033
OS Command Injection in GitHub repository mlflow/mlflow prior to 2.6.0.
Critical
CVE-2023-38673
Command injection in PaddlePaddle
Medium
CVE-2023-38672
Float point exception (FPE) in paddlepaddle
High
CVE-2023-38671
Heap buffer overflow in PaddlePaddle
Medium
CVE-2023-38670
Null pointer dereference in PaddlePaddle
High
CVE-2023-38669
Use after free in PaddlePaddle
Medium
CVE-2023-38501
copyparty vulnerable to reflected cross-site scripting via k304 parameter
Medium
CVE-2023-37902
ecrecover can return undefined data if signature does not verify
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.