Medium
CVE-2023-48311
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,337
Reset filters
High
CVE-2023-47890
Download to arbitrary folder can lead to RCE
High
CVE-2023-48224
Ethyca Fides Cryptographically Weak Generation of One-Time Codes for Identity Verification
Medium
CVE-2023-46121
yt-dlp Generic Extractor MITM Vulnerability via Arbitrary Proxy Injection
Medium
CVE-2023-5189
Ansible galaxy-importer Path Traversal vulnerability
High
CVE-2023-45805
PDM Trojan Lockfile
High
CVE-2023-4785
Denial of Service Vulnerability in gRPC TCP Server (Posix-compatible platforms)
Low
CVE-2023-41329
Domain restrictions bypass via DNS Rebinding in WireMock and WireMock Studio webhooks, proxy and recorder modes
High
CVE-2023-41319
Remote Code Execution in Custom Integration Upload
Medium
CVE-2023-39531
Sentry vulnerable to incorrect credential validation on OAuth token requests
High
CVE-2023-33953
Excessive Iteration in gRPC
Low
CVE-2023-37480
Fides Webserver Vulnerable to Zip Bomb File Uploads
Medium
CVE-2023-35934
yt-dlp File Downloader cookie leak
Medium
CVE-2023-32686
kiwitcms vulnerable to stored XSS via unrestricted files upload
Medium
CVE-2023-36807
PyPDF2 vulnerable to possible Infinite Loop when reading malformed objects
High
CVE-2023-34395
Apache Airflow ODBC Provider Argument Injection vulnerability
High
CVE-2023-27489
Kiwi TCMS Stored Cross-site Scripting via SVG file
High
CVE-2023-28117
Sentry SDK leaks sensitive session information when `sendDefaultPII` is set to `True`
High
CVE-2022-4223
pgadmin4 vulnerable to Code Injection
Medium
CVE-2026-55646
vLLM: Speech-to-text upload size limit is enforced after full UploadFile read
High
CVE-2026-54059
Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading
Medium
CVE-2026-55798
Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path
High
CVE-2026-55379
Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading
Medium
CVE-2022-31153
OpenZeppelin Contracts for Cairo account cannot process transactions on Goerli
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.