Low
ghsa-5cpq-8wj7-hf2v
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,856
Reset filters
Medium
CVE-2023-29159
Starlette has Path Traversal vulnerability in StaticFiles
Medium
CVE-2023-2970
MindSpore vulnerable to memory corruption
Low
CVE-2023-33185
Incorrect signature verification in django-ses
Medium
CVE-2023-32681
Unintended leak of Proxy-Authorization header in requests
Medium
CVE-2023-32323
Synapse Outgoing federation to specific hosts can be disabled by sending malicious invites
High
CVE-2022-39374
Synapse Denial of service due to incorrect application of event authorization rules during state resolution
High
CVE-2022-39335
Synapse does not apply enough checks to servers requesting auth events of events in a room
Medium
CVE-2023-28370
Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user acce
Critical
CVE-2023-33175
toui allows user-specific variables to be shared between users
Medium
CVE-2023-32675
Vyper's nonpayable default functions are sometimes payable
Medium
CVE-2023-2800
Insecure Temporary File in GitHub repository huggingface/transformers prior to 4.30.0.
Critical
CVE-2023-2780
Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.3.1.
High
CVE-2023-32303
Planet's secret file is created with excessive permissions
High
CVE-2023-32059
Vyper vulnerable to incorrect ordering of arguments for kwargs passed to internal calls
High
CVE-2023-32058
Vyper vulnerable to integer overflow in loop
High
CVE-2023-31146
Vyper vulnerable to OOB DynArray access when array is on both LHS and RHS of an assignment
Medium
ghsa-jjgp-whrp-gq8m
in-toto: PGP trust model not (fully) considered
High
CVE-2023-30172
A directory traversal vulnerability in the /get-artifact API method of the mlflow platform up to v2.0.1 allows attackers to read arbitrary files on the server via the path parameter.
Medium
CVE-2023-32076
in-toto vulnerable to Configuration Read From Local Directory
High
CVE-2023-31143
Mage-ai missing user authentication
High
CVE-2023-30837
vyper vulnerable to storage allocator overflow
Critical
CVE-2023-25754
Privilege Context Switching Error vulnerability in Apache Software Foundation Apache Airflow.This issue affects Apache Airflow: before 2.6.0.
Medium
CVE-2023-29247
Task instance details page in the UI is vulnerable to a stored XSS.This issue affects Apache Airflow: before 2.6.0.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.