High
CVE-2023-39660
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
High
CVE-2023-33953
Excessive Iteration in gRPC
High
CVE-2020-35141
FaucetSDN Ryu Denial of Service Vulnerability
High
CVE-2020-35139
FaucetSDN Ryu Denial of Service Vulnerability
High
CVE-2023-40272
Apache Airflow Spark Provider Improper Input Validation vulnerability
High
CVE-2023-39349
Privilege escalation via ApiTokensEndpoint
Medium
CVE-2023-39523
ScanCode.io command injection in docker image fetch process
Medium
CVE-2023-3637
Denial of service in neutron
Medium
CVE-2023-4138
RDiffWeb vulnerable to Allocation of Resources Without Limits or Throttling
Low
CVE-2023-37481
Fides Webserver Vulnerable to SVG Bomb File Uploads
Low
CVE-2023-37480
Fides Webserver Vulnerable to Zip Bomb File Uploads
High
CVE-2023-38200
Keylime's registrar vulnerable to Denial-of-service attack via a single open connection
High
CVE-2023-37415
Apache Airflow Apache Hive Provider Improper Input Validation vulnerability
Medium
CVE-2023-35934
yt-dlp File Downloader cookie leak
Medium
CVE-2023-32732
gRPC connection termination issue
High
CVE-2023-1428
gRPC Reachable Assertion issue
High
CVE-2023-36809
Kiwi TCMS's misconfigured HTTP headers allow stored XSS execution with Firefox
High
CVE-2023-33234
Apache Airflow CNCF Kubernetes Provider: KubernetesPodOperator RCE via connection configuration
Medium
CVE-2023-36464
pypdf and PyPDF2 possible Infinite Loop when a comment isn't followed by a character
Medium
CVE-2023-37365
hnswlib Double Free vulnerability
High
CVE-2023-32731
Connection confusion in gRPC
High
CVE-2023-35932
jcvi vulnerable to Configuration Injection due to unsanitized user input
Medium
CVE-2023-32686
kiwitcms vulnerable to stored XSS via unrestricted files upload
High
CVE-2023-33733
Reportlab vulnerable to remote code execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.