Medium
CVE-2021-46897
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,855
Reset filters
Critical
CVE-2023-32785
Langchain SQL Injection vulnerability
High
CVE-2023-5690
Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.2.2.
Medium
CVE-2023-5688
Cross-site Scripting (XSS) - DOM in GitHub repository modoboa/modoboa prior to 2.2.2.
Medium
CVE-2023-5689
Cross-site Scripting (XSS) - DOM in GitHub repository modoboa/modoboa prior to 2.2.2.
Medium
CVE-2023-41893
Home Assistant vulnerable to account takeover via auth_callback login
Medium
CVE-2023-44690
mycli has Inadequate Encryption Strength
High
CVE-2023-45815
Viewing wget extractor output while logged in as an admin allows archived JS to execute in the admins context
Low
CVE-2023-45809
Wagtail vulnerable to disclosure of user names via admin bulk action views
High
CVE-2023-46229
LangChain before 0.0.317 allows SSRF via document_loaders/recursive_url_loader.py because crawling can proceed from an external server to an internal server.
Medium
CVE-2023-45803
urllib3's request body not stripped after redirect from 303 status changes request method to GET
High
CVE-2023-5590
NULL Pointer Dereference in GitHub repository seleniumhq/selenium prior to 4.14.0.
Medium
CVE-2018-25091
urllib3 before 1.24.2 does not remove the authorization HTTP header when following a cross-origin redirect (i.e., a redirect that differs in host, port, or scheme). This can allow for credentials in t
Medium
CVE-2023-42792
Apache Airflow, in versions prior to 2.7.2, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could give the user write acce
Medium
CVE-2023-42663
Apache Airflow, versions before 2.7.2, has a vulnerability that allows an authorized user who has access to read specific DAGs only, to read information about task instances in other DAGs.
Medium
CVE-2023-42780
Apache Airflow, versions prior to 2.7.2, contains a security vulnerability that allows authenticated users of Airflow to list warnings for all DAGs, even if the user had no permission to see those DAG
Medium
CVE-2023-45348
Apache Airflow, versions 2.7.0 and 2.7.1, is affected by a vulnerability that allows an authenticated user to retrieve sensitive configuration information when the "expose_config" option is set to "no
Medium
CVE-2023-28635
Defining resource name as integer may give unintended access in vantage6
Medium
CVE-2023-41882
Improper Access Control in vantage6
Low
CVE-2023-41881
vantage6 does not properly delete linked resources when deleting a collaboration
High
CVE-2023-23930
Pickle serialization vulnerable to Deserialization of Untrusted Data
Medium
CVE-2023-36566
Microsoft Common Data Model SDK Denial of Service Vulnerability
Medium
CVE-2023-45129
matrix-synapse vulnerable to denial of service due to malicious server ACL events
Critical
CVE-2023-44467
langchain_experimental 0.0.14 allows an attacker to bypass the CVE-2023-36258 fix and execute arbitrary code via the PALChain in the python exec method.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.