High
CVE-2023-46124
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Low
CVE-2023-46126
Fides JavaScript Injection Vulnerability in Privacy Center URL
High
CVE-2023-44464
pretix allows Pillow to parse EPS files
Medium
CVE-2023-45813
TorBot vulnerable to Inefficient Regular Expression Complexity in validate_link
High
CVE-2023-40581
yt-dlp on Windows vulnerable to `--exec` command injection when using `%q`
High
CVE-2023-45805
PDM Trojan Lockfile
High
CVE-2023-4570
NI MeasurementLink Python Services Improper Access Restriction vulnerability
Medium
CVE-2023-1633
OpenStack Barbican credential leak flaw
High
CVE-2023-43810
opentelemetry-instrumentation Denial of Service vulnerability due to unbound cardinality metrics
Medium
CVE-2023-4237
Ansible may expose private key
Low
CVE-2023-42458
Zope vulnerable to Stored Cross Site Scripting with SVG images
Medium
CVE-2023-5002
pgAdmin failed to properly control the server code
High
CVE-2023-4785
Denial of Service Vulnerability in gRPC TCP Server (Posix-compatible platforms)
Medium
CVE-2023-41626
Gradio arbitrary file upload vulnerability
Medium
CVE-2023-1636
OpenStack Barbican information disclosure vulnerability
High
CVE-2023-1625
OpenStack Heat information leak vulnerability
High
CVE-2023-41267
Apache HDFS Provider error message suggested
Low
CVE-2023-41329
Domain restrictions bypass via DNS Rebinding in WireMock and WireMock Studio webhooks, proxy and recorder modes
Low
CVE-2023-41057
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in hyper-bump-it
Medium
CVE-2023-40587
Pyramid static view path traversal up one directory
High
CVE-2023-41319
Remote Code Execution in Custom Integration Upload
High
CVE-2023-27604
Airflow Sqoop Provider RCE Vulnerability
Medium
CVE-2023-39531
Sentry vulnerable to incorrect credential validation on OAuth token requests
Medium
CVE-2023-40024
Scancode.io Reflected Cross-Site Scripting (XSS) in license endpoint
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.