High
CVE-2022-27949
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,359
Reset filters
High
CVE-2022-40127
A vulnerability in Example Dags of Apache Airflow allows an attacker with UI access who can trigger DAGs, to execute arbitrary commands via manually provided run_id parameter. This issue affects Apach
High
CVE-2022-41892
Arches vulnerable to execution of arbitrary SQL
Medium
CVE-2022-43982
In Apache Airflow versions prior to 2.4.2, the "Trigger DAG with config" screen was susceptible to XSS attacks via the `origin` query argument.
Medium
CVE-2022-43985
In Apache Airflow versions prior to 2.4.2, there was an open redirect in the webserver's `/confirm` endpoint.
Medium
ghsa-39hc-v87j-747x
Vulnerable OpenSSL included in cryptography wheels
Critical
CVE-2022-39366
acryl-datahub missing JWT signature check
Medium
CVE-2022-44020
OpenStack Sushy-Tools and VirtualBMC Improper Preservation of Permissions
High
CVE-2022-43281
wasm-interp v1.0.29 was discovered to contain a heap overflow via the component std::vector<wabt::Type, std::allocator<wabt::Type>>::size() at /bits/stl_vector.h.
Critical
CVE-2022-39327
Azure CLI is the command-line interface for Microsoft Azure. In versions previous to 2.40.0, Azure CLI contains a vulnerability for potential code injection. Critical scenarios are where a hosting mac
Medium
CVE-2022-3607
Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository octoprint/octoprint prior to 1.8.3.
Unrated
CVE-2022-41384
The d8s-domains package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is
High
CVE-2022-41672
In Apache Airflow, prior to version 2.4.1, deactivating a user wouldn't prevent an already authenticated user from being able to continue using the UI or API.
Medium
ghsa-8r99-h8j2-rw64
Twisted vulnerable to HTTP Request Smuggling Attacks
High
CVE-2022-39280
ReDoS issue in dparse
High
CVE-2022-40922
LIEF vulnerable to denial of service through segmentation fault
Medium
CVE-2022-40923
LIEF vulnerable to denial of service through segmentation fault
Medium
CVE-2022-3292
Use of Cache Containing Sensitive Information in GitHub repository ikus060/rdiffweb prior to 2.4.8.
High
CVE-2022-40604
In Apache Airflow 2.3.0 through 2.3.4, part of a url was unnecessarily formatted, allowing for possible information extraction.
Medium
CVE-2022-40754
In Apache Airflow 2.3.0 through 2.3.4, there was an open redirect in the webserver's `/confirm` endpoint.
High
ghsa-6h2x-4gjf-jc5w
autogluon.multimodal vulnerable to unsafe YAML deserialization
High
CVE-2022-39974
WASM3 v0.5.0 was discovered to contain a segmentation fault via the component op_Select_i32_srs in wasm3/source/m3_exec.h.
Medium
CVE-2022-35983
TensorFlow vulnerable to `CHECK` fail in `Save` and `SaveSlices`
Medium
CVE-2022-35984
TensorFlow vulnerable to `CHECK` fail in `ParameterizedTruncatedNormal`
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.