High
CVE-2023-36826
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,856
Reset filters
Medium
ghsa-cw7j-v52w-fp5r
copyparty vulnerable to reflected cross-site scripting via hc parameter
Medium
CVE-2023-37901
Indico vulnerable to Cross-Site-Scripting via confirmation prompts
Medium
CVE-2023-37276
aiohttp.web.Application vulnerable to HTTP request smuggling via llhttp HTTP request parser
Low
CVE-2023-3674
A flaw was found in the keylime attestation verifier, which fails to flag a device's submitted TPM quote as faulty when the quote's signature does not validate for some reason. Instead, it will only e
Medium
CVE-2022-40896
A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer.
Critical
CVE-2023-3765
Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.5.0.
Critical
CVE-2018-25088
postgraas-server vulnerable to SQL injection
High
CVE-2023-38325
cryptography mishandles SSH certificates
High
CVE-2023-37474
copyparty vulnerable to path traversal attack
High
CVE-2023-35908
Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows unauthorized read access to a DAG through the URL. It is recommended to upgrade to a version that is not affected
High
CVE-2023-22888
Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an attacker to cause a service disruption by manipulating the run_id parameter. This vulnerability is considered low s
High
CVE-2023-36543
Apache Airflow, versions before 2.6.3, has a vulnerability where an authenticated user can use crafted input to make the current request hang. It is recommended to upgrade to a version that is not aff
High
CVE-2023-22887
Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an attacker to perform unauthorized file access outside the intended directory structure by manipulating the run_id pa
High
CVE-2022-46651
Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an unauthorized actor to gain access to sensitive information in Connection edit view. This vulnerability is considere
High
CVE-2023-37271
RestrictedPython vulnerable to arbitrary code execution via stack frame sandbox escape
Critical
CVE-2023-37659
xalpha v0.11.4 is vulnerable to Remote Command Execution (RCE).
Medium
ghsa-8c6x-g4fw-8rf4
Whatsapp-Chat-Exporter has Cross-Site Scripting vulnerability in HTML output of chats.
Medium
CVE-2023-36829
Sentry CORS misconfiguration
Critical
CVE-2023-29824
** DISPUTED ** A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0. NOTE: the vendor and discoverer indicate that this is not a security issue.
Medium
CVE-2023-30776
Apache Superset vulnerable to Exposure of Sensitive Information
Medium
CVE-2023-25504
Apache Superset Server-Side Request Forgery vulnerability
Medium
CVE-2023-36830
SQLFluff users with access to config file, using `libary_path` may call arbitrary python code
High
CVE-2023-36189
SQL injection vulnerability in langchain v.0.0.64 allows a remote attacker to obtain sensitive information via the SQLDatabaseChain component.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.