High
CVE-2023-6831
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,855
Reset filters
Critical
CVE-2023-6569
External Control of File Name or Path in h2oai/h2o-3
Critical
CVE-2023-6572
Gradio Exposure of Sensitive Information to an Unauthorized Actor vulnerability
High
CVE-2023-46247
incorrect storage layout for contracts containing large arrays
High
ghsa-6x4h-9622-fqr6
Improper validation in meraki
High
CVE-2023-6753
Path Traversal in GitHub repository mlflow/mlflow prior to 2.9.2.
Low
CVE-2023-50263
Unauthenticated db-file-storage views
Critical
CVE-2023-43364
Searchor CLI's Search vulnerable to Arbitrary Code using Eval
High
CVE-2023-6709
Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository mlflow/mlflow prior to 2.9.2.
Critical
CVE-2023-50423
Improper Privilege Management in sap-xssec
Medium
CVE-2023-49795
Server-Side Request Forgery in mindsdb
High
CVE-2023-49797
Local Privilege Escalation in Windows
Low
ghsa-j4g3-3q8x-jxqp
dbt-core's secret env vars written to package-lock.json in plaintext
Medium
CVE-2023-6568
A reflected Cross-Site Scripting (XSS) vulnerability exists in the mlflow/mlflow repository, specifically within the handling of the Content-Type header in POST requests. An attacker can inject malici
Medium
CVE-2023-26154
pubnub Insufficient Entropy vulnerability
Low
CVE-2023-49297
PyDrive2's unsafe YAML deserialization in LoadSettingsFile allows arbitrary code execution
High
CVE-2023-43472
Information exposure in MLflow
Medium
CVE-2023-49080
jupyter-server errors include tracebacks with path information
High
ghsa-7vwr-g6pm-9hc8
Cookie leakage between different users in fastapi-proxy-lib
Medium
CVE-2023-49081
aiohttp's ClientSession is vulnerable to CRLF injection via version
Medium
CVE-2023-49082
aiohttp's ClientSession is vulnerable to CRLF injection via method
Medium
CVE-2023-49083
cryptography vulnerable to NULL-dereference when loading PKCS7 certificates
Medium
CVE-2023-42505
Apache Superset Exposure of Sensitive Information to an Unauthorized Actor vulnerability
Medium
CVE-2023-42502
Apache Superset Open Redirect vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.