High
CVE-2023-28117
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,016
Reset filters
High
CVE-2023-25171
Denial of service vulnerability on Password reset page
Medium
CVE-2022-47950
OpenStack Swift XML external entities (XXE) Injection
High
CVE-2022-4223
pgadmin4 vulnerable to Code Injection
High
CVE-2022-33684
Apache Pulsar Disabled Certificate Validation for OAuth Client Credential Requests makes C++/Python Clients vulnerable to MITM attack
High
CVE-2022-39254
When matrix-nio receives forwarded room keys, the receiver doesn't check if it requested the key from the forwarder
Medium
CVE-2022-39348
Twisted vulnerable to NameVirtualHost Host header injection
Medium
CVE-2021-23385
Flask-Security vulnerable to Open Redirect
High
CVE-2026-57573
Crawl4AI: Unauthenticated SSRF on the Docker server streaming crawl path (/crawl/stream)
Critical
CVE-2026-57572
Crawl4AI: Unauthenticated RCE via Chromium launch-argument injection in browser_config.extra_args
High
CVE-2026-55514
vLLM denial of service via prompt embeds on M-RoPE models
Critical
CVE-2026-57571
Crawl4AI: Arbitrary file write (path traversal) in crawler downloads can lead to RCE
Medium
CVE-2026-55646
vLLM: Speech-to-text upload size limit is enforced after full UploadFile read
High
CVE-2026-54060
Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`
High
CVE-2026-55380
Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`
High
CVE-2026-49297
Apache Airflow's Google provider operators `GCSToSFTPOperator` and `GCSTimeSpanFileTransformOperator` joined GCS object names returned by the bucket listing API directly to a destination filesystem pa
High
CVE-2022-31116
Incorrect handling of invalid surrogate pair characters
High
CVE-2022-35920
sanic vulnerable to Path Traversal when using `app.static` if using encoded `%2F` URLs
Medium
CVE-2022-31153
OpenZeppelin Contracts for Cairo account cannot process transactions on Goerli
High
CVE-2019-13594
Mirumee Saleor CSRF Protection Disabled
High
CVE-2010-2235
Cobbler is vulnerable to code injection
Medium
CVE-2013-2030
OpenStack Nova uses insecure keystone middleware tmpdir by default
High
CVE-2016-0737
OpenStack Object Storage (Swift) allows remote attackers to cause a denial of service
High
CVE-2016-0738
OpenStack Object Storage (Swift) allows remote attackers to cause a denial of service
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.