High
CVE-2023-27489
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,358
Reset filters
High
CVE-2023-28710
Apache Airflow Spark Provider vulnerable to improper input validation
High
CVE-2023-25669
TensorFlow has Floating Point Exception in AvgPoolGrad with XLA
Medium
CVE-2022-3146
tripleo-ansible may disclose important configuration details from an OpenStack deployment
Medium
CVE-2022-3101
tripleo-ansible may disclose important configuration details from an OpenStack deployment
Medium
CVE-2023-26051
Saleor has Staff-Authenticated Error Message Information Disclosure Vulnerability via Python Exceptions
Low
CVE-2023-26052
Saleor Unauthenticated Information Disclosure Vulnerability via Python Exceptions
High
CVE-2023-28117
Sentry SDK leaks sensitive session information when `sendDefaultPII` is set to `True`
Medium
CVE-2022-3277
openstack-neutron uncontrolled resource consumption flaw
High
CVE-2023-0286
Vulnerable OpenSSL included in cryptography wheels
High
CVE-2023-25171
Denial of service vulnerability on Password reset page
High
CVE-2023-25956
Apache Airflow AWS Provider Generates Error Message Containing Sensitive Information
Medium
CVE-2023-23608
Path traversal in spotipy
High
CVE-2023-25156
No protection against brute-force attacks on login page
High
CVE-2023-25692
Apache Airflow Google Provider Improper Input Validation vulnerability
Medium
CVE-2023-0227
Pyload Insufficient Session Expiration vulnerability
Medium
CVE-2023-0055
Pyload contains Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
High
CVE-2022-38060
OpenStack Kolla sudo privilege escalation vulnerability
High
CVE-2022-4223
pgadmin4 vulnerable to Code Injection
Medium
CVE-2022-4105
Cross-site Scripting in kiwitcms
High
CVE-2022-41547
MobSF allows attackers to read arbitrary files via a crafted HTTP request
High
CVE-2022-39254
When matrix-nio receives forwarded room keys, the receiver doesn't check if it requested the key from the forwarder
Medium
CVE-2022-3102
jwcrypto token substitution can lead to authentication bypass
Medium
CVE-2022-3355
Inventree vulnerable to Stored Cross-site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.