Low
CVE-2023-23934
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 240
Reset filters
Low
CVE-2022-23530
GuardDog vulnerable to arbitrary file write when scanning a specially-crafted remote PyPI package
Medium
CVE-2022-36046
Next.js is a React framework that can provide building blocks to create web applications. All of the following must be true to be affected by this CVE: Next.js version 12.2.3, Node.js version above v1
Medium
CVE-2021-3702
ansible-runner vulnerable to Race Condition
Medium
CVE-2022-30187
Microsoft: CBC Padding Oracle in Azure Blob Storage Encryption Library
Critical
CVE-2022-24840
Path Traversal in django-s3file
Medium
CVE-2020-29565
An issue was discovered in OpenStack Horizon before 15.3.2, 16.x before 16.2.1, 17.x and 18.x before 18.3.3, 18.4.x, and 18.5.x. There is a lack of validation of the "next" parameter, which would allo
High
CVE-2013-4200
The isURLInPortal method in the URLTool class in in_portal.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 treats URLs starting with a space as a relative URL, which allows r
Medium
CVE-2013-0342
The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which makes it easier for remote attackers to spoof packets by predicting the next ID, a different vulnerability than
Medium
CVE-2021-32805
Flask-AppBuilder Open Redirect vulnerability
High
CVE-2021-37648
Incorrect validation of `SaveV2` inputs
High
CVE-2021-37647
Null pointer dereference in `SparseTensorSliceDataset`
High
CVE-2021-32629
Memory access due to code generation flaw in Cranelift module
Low
CVE-2021-32618
Open Redirect in Flask-Security-Too
Low
CVE-2021-29532
Heap out of bounds read in `RaggedCross`
Low
CVE-2021-29530
Invalid validation in `SparseMatrixSparseCholesky`
Low
CVE-2021-29513
Type confusion during tensor casts lead to dereferencing null pointers
Medium
CVE-2021-21360
Exposure of Sensitive Information to an Unauthorized Actor in Products.GenericSetup
Low
ghsa-4ph2-8337-hm62
Key Caching behavior in the DynamoDB Encryption Client.
Low
CVE-2020-26267
Lack of validation in data format attributes in TensorFlow
High
CVE-2020-8897
Security issues in AWS KMS and AWS Encryption SDKs: in-band protocol negotiation and robustness
High
CVE-2020-7212
Uncontrolled Resource Consumption in urllib3
High
ghsa-m5ff-3wj3-8ph4
HTTP Request Smuggling: Invalid whitespace characters in headers in Waitress
Unrated
CVE-2012-3540
Open redirect vulnerability in views/auth_forms.py in OpenStack Dashboard (Horizon) Essex (2012.1) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a U
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.