Medium
CVE-2023-40170
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,999
Reset filters
Medium
CVE-2023-39968
Open Redirect Vulnerability in jupyter-server
High
CVE-2023-40195
Deserialization of Untrusted Data, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Software Foundation Apache Airflow Spark Provider.
High
CVE-2023-40017
GeoNode Server Side Request forgery
Medium
CVE-2023-39441
Apache Airflow missing Certificate Validation
High
CVE-2023-37379
Apache Airflow, in versions prior to 2.7.0, contains a security vulnerability that can be exploited by an authenticated user possessing Connection edit privileges. This vulnerability allows the user t
High
CVE-2023-40273
The session fixation vulnerability allowed the authenticated user to continue accessing Airflow webserver even after the password of the user has been reset by the admin - up until the expiry of the s
High
CVE-2023-39553
apache-airflow-providers-apache-drill Improper Input Validation vulnerability
High
CVE-2023-39508
Execution with Unnecessary Privileges, : Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache Airflow.The "Run Task" feature enables authentica
Critical
CVE-2023-38686
Sydent does not verify email server certificates
Medium
CVE-2023-38501
copyparty vulnerable to reflected cross-site scripting via k304 parameter
Medium
ghsa-cw7j-v52w-fp5r
copyparty vulnerable to reflected cross-site scripting via hc parameter
Medium
CVE-2023-37276
aiohttp.web.Application vulnerable to HTTP request smuggling via llhttp HTTP request parser
Critical
CVE-2018-25088
postgraas-server vulnerable to SQL injection
High
CVE-2023-37474
copyparty vulnerable to path traversal attack
Medium
CVE-2023-25504
Apache Superset Server-Side Request Forgery vulnerability
Medium
CVE-2023-36830
SQLFluff users with access to config file, using `libary_path` may call arbitrary python code
High
CVE-2023-36827
ethyca-fides Webserver API Path Traversal vulnerability
High
CVE-2023-34457
MechanicalSoup vulnerable to malicious web server reading arbitrary files on client using file input inside HTML form
Critical
CVE-2023-31543
A dependency confusion in pipreqs v0.3.0 to v0.4.11 allows attackers to execute arbitrary code via uploading a crafted PyPI package to the chosen repository server.
Critical
ghsa-hj8m-9fhf-v7jp
fief-server Server-Side Template Injection vulnerability
High
CVE-2023-35005
In Apache Airflow, some potentially sensitive values were being shown to the user in certain situations.
High
CVE-2023-34233
Snowflake Python Connector vulnerable to Command Injection
Medium
CVE-2023-32683
Synapse has URL deny list bypass via oEmbed and image URLs when generating previews
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.