High
CVE-2006-0847
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,829
Reset filters
Medium
CVE-2005-4644
Cross-site scripting (XSS) vulnerability in the HTML WikiProcessor in Edgewall Trac 0.9.2 allows remote attackers to inject arbitrary web script or HTML via javascript in the SRC attribute of an IMG t
Critical
CVE-2021-41945
Improper Input Validation in httpx
High
CVE-2022-23942
Apache Doris, prior to 1.0.0, used a hardcoded key and IV to initialize the cipher used for ldap password, which may lead to information disclosure.
Medium
CVE-2022-24880
Potential Captcha Validate Bypass in flask-session-captcha
High
CVE-2012-2238
trytond 2.4: ModelView.button fails to validate authorization
Medium
ghsa-cf4q-4cqr-7g7w
SVG with embedded scripts can lead to cross-site scripting attacks in xml2rfc
High
CVE-2022-24845
Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. In affected versions, the return of `<iface>.returns_int128()` is not validated to fall within the bounds of `int128`. Thi
Medium
CVE-2011-4924
Zope XSS Vulnerability
High
CVE-2022-28108
Selenium Server (Grid) CSRF
Medium
CVE-2022-24859
Manipulated inline images can cause Infinite Loop in PyPDF2
High
CVE-2022-24857
Improper Authentication in django-mfa3
Critical
CVE-2022-27479
Apache Superset before 1.4.2 is vulnerable to SQL injection in chart data requests. Users should update to 1.4.2 or higher which addresses this issue.
High
CVE-2022-24788
Buffer Overflow in vyper
Critical
CVE-2022-28347
SQL Injection in Django
Critical
CVE-2022-28346
SQL Injection in Django
High
CVE-2022-24758
The Jupyter notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.9, unauthorized actors can access sensitive information from server logs. Anytime a 5xx error i
Critical
CVE-2022-24801
Inconsistent Interpretation of HTTP Requests in twisted.web
High
CVE-2022-24787
Incorrect Comparison in Vyper
Critical
CVE-2022-27177
Use of Externally-Controlled Format String in consoleme
High
CVE-2022-24798
Improper Removal of Sensitive Information Before Storage or Transfer in irrd
High
CVE-2022-25598
Uncontrolled Resource Consumption in Apache DolphinScheduler
High
CVE-2022-22934
An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Salt Masters do not sign pillar data with the minion’s public key, which can result in attackers substituting arbit
High
CVE-2022-22941
An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. When configured as a Master-of-Masters, with a publisher_acl, if a user configured in the publisher_acl targets any
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.