Medium
CVE-2023-0055
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2023-0057
pyLoad vulnerable to Improper Restriction of Rendered UI Layers or Frames
Medium
CVE-2023-22298
pgAdmin 4 Open Redirect vulnerability
Medium
CVE-2019-25091
nsupdate.info has Sensitive Cookie Without 'HttpOnly' Flag
High
CVE-2022-38060
OpenStack Kolla sudo privilege escalation vulnerability
Medium
CVE-2022-4728
Graphite Web Cross-site Scripting vulnerability
Medium
CVE-2022-4396
pyRdfa3 Cross-site Scripting vulnerability
Medium
CVE-2022-4589
Terms and Conditions Module vulnerable to Open Redirect
Medium
CVE-2021-4287
binwalk vulnerable to UNIX Symbolic Link (Symlink) Following
High
CVE-2022-4223
pgadmin4 vulnerable to Code Injection
Medium
CVE-2022-4105
Cross-site Scripting in kiwitcms
Medium
CVE-2022-42965
snowflake-connector-python is vulnerable to Regular Expression Denial of Service (ReDoS)
High
CVE-2022-33684
Apache Pulsar Disabled Certificate Validation for OAuth Client Credential Requests makes C++/Python Clients vulnerable to MITM attack
High
CVE-2022-41547
MobSF allows attackers to read arbitrary files via a crafted HTTP request
High
CVE-2022-39254
When matrix-nio receives forwarded room keys, the receiver doesn't check if it requested the key from the forwarder
Medium
CVE-2022-3102
jwcrypto token substitution can lead to authentication bypass
Medium
CVE-2022-3355
Inventree vulnerable to Stored Cross-site Scripting
Medium
CVE-2022-39348
Twisted vulnerable to NameVirtualHost Host header injection
High
CVE-2022-3697
Ansible leaks password to logs
Medium
CVE-2021-23385
Flask-Security vulnerable to Open Redirect
Medium
CVE-2022-3644
Plaintext storage of tokens in pulp_ansible
High
CVE-2022-1941
protobuf-cpp and protobuf-python have potential Denial of Service issue
High
CVE-2022-42906
Powerline Gitstatus vulnerable to arbitrary code execution
Medium
CVE-2026-59710
showdown allows stored cross-site scripting through table header ID injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.