Critical
CVE-2023-29374
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,856
Reset filters
High
CVE-2023-28836
Wagtail vulnerable to stored Cross-site Scripting attack via ModelAdmin views
Medium
CVE-2023-28837
Wagtail vulnerable to denial-of-service via memory exhaustion when uploading large files
High
CVE-2022-4899
zstd vulnerable to buffer overrun
Medium
CVE-2022-23522
Arbitrary file write in mindsdb when Extracting Tarballs retrieved from a remote location
Critical
CVE-2023-1712
Use of hard-coded, security-relevant constants in deepset-ai/haystack
Medium
CVE-2023-25661
TensorFlow Denial of Service vulnerability
Medium
CVE-2023-28858
redis-py before 4.5.3, as used in ChatGPT and other products, leaves a connection open after canceling an async Redis command at an inopportune time (in the case of a pipeline operation), and can send
High
CVE-2023-28859
redis-py through 4.5.3 leaves a connection open after canceling an async Redis command at an inopportune time (in the case of a non-pipeline operation), and can send response data to the client of an
High
ghsa-cpmr-mw4j-99r7
Nginx alias path traversal allows unauthenticated attackers to read all files on /label_studio/core/
Medium
CVE-2023-1176
Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.2.2.
Critical
CVE-2023-1177
Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1.
High
CVE-2023-25659
TensorFlow vulnerable to Out-of-Bounds Read in DynamicStitch
High
CVE-2023-25666
TensorFlow has Floating Point Exception in AudioSpectrogram
Medium
CVE-2023-25667
TensorFlow vulnerable to segfault when opening multiframe gif
Critical
CVE-2023-25668
TensorFlow has a heap out-of-buffer read vulnerability in the QuantizeAndDequantize operation
High
CVE-2023-25671
TensorFlow has segmentation fault in tfg-translate
High
CVE-2023-25672
TensorFlow has Null Pointer Error in LookupTableImportV2
High
CVE-2023-25674
TensorFlow has Null Pointer Error in RandomShuffle with XLA enable
High
CVE-2023-25801
TensorFlow has double free in Fractional(Max/Avg)Pool
Critical
CVE-2018-25082
weixin-python XML External Entity vulnerability
High
CVE-2023-27586
CairoSVG improperly processes SVG files loaded from external resources
Medium
CVE-2023-27494
Streamlit publishes previously-patched Cross-site Scripting vulnerability
Medium
CVE-2023-25695
Generation of Error Message Containing Sensitive Information vulnerability in Apache Software Foundation Apache Airflow.This issue affects Apache Airflow: before 2.5.2.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.