High
CVE-2022-21689
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,342
Reset filters
High
CVE-2022-21688
Out-of-bounds Read in Onionshare
Medium
CVE-2022-21683
Comment reply notifications sent to incorrect users
Medium
CVE-2022-22821
Path Traversal in nemo-toolkit
High
CVE-2022-21668
Pipenv's requirements.txt parsing allows malicious index url in comments
Critical
CVE-2022-22817
Arbitrary expression injection in Pillow
High
CVE-2021-23727
OS Command Injection in celery
Unrated
CVE-2021-44078
An issue was discovered in split_region in uc.c in Unicorn Engine before 2.0.0-rc5. It allows local attackers to escape the sandbox. An attacker must first obtain the ability to execute crafted code i
Medium
CVE-2021-4162
archivy is vulnerable to Cross-Site Request Forgery (CSRF)
High
CVE-2021-43854
Inefficient Regular Expression Complexity in nltk (word_tokenize, sent_tokenize)
Medium
CVE-2021-34141
Incomplete string comparison in the numpy.core component in NumPy1.9.x, which allows attackers to fail the APIs via constructing specific string objects.
Medium
CVE-2021-33430
NumPy Buffer Overflow (Disputed)
Medium
CVE-2021-43837
vault-cli contains possible RCE when reading user-defined data
Medium
CVE-2021-43818
lxml's HTML Cleaner allows crafted and SVG embedded scripts to pass through
High
CVE-2021-41265
Improper Authentication in Flask-AppBuilder
High
CVE-2021-43811
Code injection via unsafe YAML loading
Medium
CVE-2021-44420
Potential bypass of an upstream access control based on URL paths in Django
Medium
CVE-2021-43781
Permissions not properly checked in Invenio-Drafts-Resources
High
CVE-2021-40830
Improper certificate management in AWS IoT Device SDK v2
High
CVE-2021-40831
Improper certificate management in AWS IoT Device SDK v2
Critical
CVE-2021-43775
Arbitrary file reading vulnerability in Aim
High
CVE-2021-41281
Path traversal in Matrix Synapse
Critical
CVE-2021-43572
Improper Verification of Cryptographic Signature in starkbank-ecdsa
Medium
CVE-2021-41134
Stored XSS in Jupyter nbdime
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.