Critical
CVE-2022-24766
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,334
Reset filters
High
CVE-2022-24761
HTTP Request Smuggling in waitress
Medium
CVE-2022-0577
Incorrect Authorization and Exposure of Sensitive Information to an Unauthorized Actor in scrapy
Medium
ghsa-mfjm-vh54-3f96
Scrapy cookie-setting is not restricted based on the public suffix list
Critical
CVE-2020-9480
In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to require authentication (spark.authenticate) via a shared secret. When enabled, however, a specially-craft
High
CVE-2022-23558
Integer overflow in TFLite array creation
High
CVE-2022-21728
Out of bounds read in Tensorflow
High
CVE-2022-21699
Execution with Unnecessary Privileges in ipython
High
CVE-2022-21668
Pipenv's requirements.txt parsing allows malicious index url in comments
Unrated
CVE-2021-44078
An issue was discovered in split_region in uc.c in Unicorn Engine before 2.0.0-rc5. It allows local attackers to escape the sandbox. An attacker must first obtain the ability to execute crafted code i
High
CVE-2021-43854
Inefficient Regular Expression Complexity in nltk (word_tokenize, sent_tokenize)
Medium
CVE-2021-43837
vault-cli contains possible RCE when reading user-defined data
Critical
CVE-2021-43572
Improper Verification of Cryptographic Signature in starkbank-ecdsa
High
ghsa-9wx7-jrvc-28mm
Signature verification vulnerability in Stark Bank ecdsa libraries
Medium
CVE-2021-41202
Overflow/crash in `tf.range`
High
CVE-2021-41211
Heap OOB in shape inference for `QuantizeV2`
Critical
CVE-2021-42343
An issue was discovered in the Dask distributed package before 2021.10.0 for Python. Single machine Dask clusters started with dask.distributed.LocalCluster or dask.distributed.Client (which defaults
High
CVE-2021-41127
Maliciously Crafted Model Archive Can Lead To Arbitrary File Write
High
CVE-2021-41146
Arbitrary command execution on Windows via qutebrowserurl: URL handler
Medium
CVE-2021-41131
Client metadata path-traversal
Medium
CVE-2021-41125
Scrapy HTTP authentication credentials potentially leaked to target websites
High
CVE-2021-41124
Splash authentication credentials potentially leaked to target websites
Critical
CVE-2021-39214
Lacking Protection against HTTP Request Smuggling in mitmproxy
Low
CVE-2021-39163
Adding a private/unlisted room to a community exposes room metadata in an unauthorised manner.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.