Vulnerability archive

Understand vulnerabilities. Protect your applications.

Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.

Platform

Severity

Disclosed from

Disclosed to

Vulnerability archive 71,593

Critical 16.10.2023

CVE-2011-10004

Recip.ly <= 1.1.7 - Unauthenticated Arbitrary File Upload in uploadImage.php

Medium 16.10.2023

CVE-2023-46077

The Awesome Feed – Custom Feed <= 2.2.5 - Reflected Cross-Site Scripting

High 15.10.2023

CVE-2023-5590

NULL Pointer Dereference in GitHub repository seleniumhq/selenium prior to 4.14.0.

Medium 15.10.2023

CVE-2018-25091

urllib3 before 1.24.2 does not remove the authorization HTTP header when following a cross-origin redirect (i.e., a redirect that differs in host, port, or scheme). This can allow for credentials in t

Medium 15.10.2023

CVE-2023-5082

History Log by click5 <= 1.0.12 - Authenticated(Administrator+) Time-Based Blind SQL Injection

Medium 14.10.2023

CVE-2023-42792

Apache Airflow, in versions prior to 2.7.2, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could give the user write acce

Medium 14.10.2023

CVE-2023-42663

Apache Airflow, versions before 2.7.2, has a vulnerability that allows an authorized user who has access to read specific DAGs only, to read information about task instances in other DAGs.

Medium 14.10.2023

CVE-2023-42780

Apache Airflow, versions prior to 2.7.2, contains a security vulnerability that allows authenticated users of Airflow to list warnings for all DAGs, even if the user had no permission to see those DAG

Medium 14.10.2023

CVE-2023-45348

Apache Airflow, versions 2.7.0 and 2.7.1, is affected by a vulnerability that allows an authenticated user to retrieve sensitive configuration information when the "expose_config" option is set to "no

High 14.10.2023

CVE-2023-26155

node-qpdf vulnerable to command injection

Medium 13.10.2023

CVE-2023-4829

Cross-site Scripting (XSS) in froxlor/froxlor

Medium 13.10.2023

CVE-2023-5573

Allocation of Resources Without Limits or Throttling in vriteio/vrite

Critical 13.10.2023

CVE-2023-5572

Server-Side Request Forgery (SSRF) in vriteio/vrite

Medium 13.10.2023

CVE-2023-5571

Improper Input Validation in vriteio/vrite

Medium 13.10.2023

CVE-2023-38251