Critical
CVE-2023-0435
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,856
Reset filters
Critical
CVE-2023-22884
Command Injection in Apache Airflow and Apache Airflow MySQL Provider
Medium
CVE-2023-0406
Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4.
Medium
CVE-2023-0398
Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4.
High
CVE-2021-32837
mechanize, a library for automatically interacting with HTTP web servers, contains a regular expression that is vulnerable to regular expression denial of service (ReDoS) prior to version 0.4.6. If a
High
CVE-2022-43719
Apache Superset vulnerable to Cross-Site Request Forgery via legacy REST API endpoints
Medium
CVE-2022-43718
Apache Superset is vulnerable to Cross-Site Scripting (XSS)
Medium
CVE-2022-41703
Apache Superset's SQL Alchemy connector vulnerable to SQL Injection
Medium
CVE-2022-43717
Apache Superset vulnerable to Cross-site Scripting
Medium
CVE-2022-43720
Apache Superset vulnerable to Injection
Medium
CVE-2022-43721
Apache Superset Open Redirect vulnerability
Medium
CVE-2022-45438
Apache Superset has Improper Access Control
Critical
CVE-2023-0297
Code Injection in pyload-ng
Medium
ghsa-h6p3-p4vx-wr8q
dompurify vulnerable to Cross-site Scripting
Medium
ghsa-pgjv-jrg2-gq3v
dompurify vulnerable to Cross-site Scripting
Medium
CVE-2019-25095
A vulnerability, which was classified as problematic, was found in kakwa LdapCherry up to 0.x. Affected is an unknown function of the component URL Handler. The manipulation leads to cross site script
Medium
CVE-2016-15010
** UNSUPPPORTED WHEN ASSIGNED **** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as problematic was found in University of Cambridge django-ucamlookup up to 1.9.1. Affected by this vulnerabi
Critical
CVE-2022-45875
Apache DolphinScheduler vulnerable to Improper Input Validation
Medium
CVE-2022-4719
Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.5.
High
CVE-2022-4720
Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.5.
Critical
CVE-2022-4724
Improper Access Control in GitHub repository ikus060/rdiffweb prior to 2.5.5.
High
CVE-2022-4722
Authentication Bypass by Primary Weakness in GitHub repository ikus060/rdiffweb prior to 2.5.5.
High
CVE-2022-4723
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.5.
Medium
CVE-2022-4721
Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository ikus060/rdiffweb prior to 2.5.5.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.