Critical
CVE-2022-24801
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,836
Reset filters
High
CVE-2022-24787
Incorrect Comparison in Vyper
Critical
CVE-2022-27177
Use of Externally-Controlled Format String in consoleme
High
CVE-2022-24798
Improper Removal of Sensitive Information Before Storage or Transfer in irrd
High
CVE-2022-25598
Uncontrolled Resource Consumption in Apache DolphinScheduler
High
CVE-2022-22934
An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Salt Masters do not sign pillar data with the minion’s public key, which can result in attackers substituting arbit
High
CVE-2022-22941
An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. When configured as a Master-of-Masters, with a publisher_acl, if a user configured in the publisher_acl targets any
High
CVE-2022-22936
An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Job publishes and file server replies are susceptible to replay attacks, which can result in an attacker replaying
Low
CVE-2022-22935
An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. A minion authentication denial of service can cause a MiTM attacker to force a minion process to stop by impersonat
High
CVE-2022-24303
Path traversal in Pillow
High
CVE-2022-24757
The Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications. Prior to version 1.15.4, unauthorized actors can access sensitive information f
High
CVE-2022-25568
MotionEye v0.42.1 and below allows attackers to access sensitive information via a GET request to /config/list. To exploit this vulnerability, a regular user password must be unconfigured.
High
CVE-2022-0315
Use of insecure temporary file in Horovod
Critical
CVE-2022-26184
Poetry before v1.1.9 contains Untrusted Search Path
Critical
CVE-2022-24766
Insufficient Protection against HTTP Request Smuggling in mitmproxy
High
CVE-2022-24770
`gradio` is an open source framework for building interactive machine learning models and demos. Prior to version 2.8.11, `gradio` suffers from Improper Neutralization of Formula Elements in a CSV Fil
High
CVE-2022-24302
Race Condition in Paramiko
High
CVE-2022-24761
HTTP Request Smuggling in waitress
Medium
CVE-2021-23556
Command injection in guake
Medium
CVE-2022-0430
Exposure of Sensitive information in httpie
High
CVE-2022-21187
Command injection in libvcs and vcspull
Critical
ghsa-32gv-6cf3-wcmq
HTTP/2 DoS Attacks: Ping, Reset, and Settings Floods
Low
ghsa-4fx9-vc88-q2xc
Infinite loop in Pillow
Medium
CVE-2022-0860
Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.