High
CVE-2023-28859
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Critical
CVE-2023-28444
angular-server-side-configuration information disclosure vulnerability in monorepo with node.js backend
High
ghsa-cpmr-mw4j-99r7
Nginx alias path traversal allows unauthenticated attackers to read all files on /label_studio/core/
Medium
CVE-2023-1176
Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.2.2.
Critical
CVE-2023-1177
Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1.
High
CVE-2023-25659
TensorFlow vulnerable to Out-of-Bounds Read in DynamicStitch
High
CVE-2023-25666
TensorFlow has Floating Point Exception in AudioSpectrogram
Medium
CVE-2023-25667
TensorFlow vulnerable to segfault when opening multiframe gif
Critical
CVE-2023-25668
TensorFlow has a heap out-of-buffer read vulnerability in the QuantizeAndDequantize operation
High
CVE-2023-25671
TensorFlow has segmentation fault in tfg-translate
High
CVE-2023-25672
TensorFlow has Null Pointer Error in LookupTableImportV2
High
CVE-2023-25674
TensorFlow has Null Pointer Error in RandomShuffle with XLA enable
High
CVE-2023-25801
TensorFlow has double free in Fractional(Max/Avg)Pool
Medium
CVE-2022-40208
Moodle may allow students to bypass sequential navigation during a quiz attempt
Medium
18f04566-3a63-41f3-aa9b-766304d56499
TH Side Cart and Menu Cart for Woocommerce <= 1.1.1 - Cross-Site Request Forgery
Medium
CVE-2023-20861
Spring Framework vulnerable to denial of service via specially crafted SpEL expression
Medium
CVE-2023-20859
Spring Vault vulnerable to insertion of sensitive information into a log file
Medium
CVE-2023-1402
Moodle may display roles to users who don't have access to them
High
CVE-2023-24788
NotrinosERP vulnerable to SQL Injection
Medium
CVE-2023-28330
Moodle arbitrary file read vulnerability
Critical
CVE-2023-28333
Moodle's Mustache pix helper contained a potential Mustache injection risk if combined with user input
Medium
CVE-2023-28332
Moodle vulnerable to Cross-site Scripting when algebra filter enabled but not functional
Medium
CVE-2023-28331
Moodle vulnerable to Cross-site Scripting
High
CVE-2023-28329
Moodle SQL Injection vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.