High
CVE-2023-37271
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 685
Reset filters
High
CVE-2023-36814
Products.CMFCore unauthenticated denial of service and crash via unchecked use of input with Python's marshal module
High
CVE-2022-39335
Synapse does not apply enough checks to servers requesting auth events of events in a room
Medium
CVE-2023-32675
Vyper's nonpayable default functions are sometimes payable
High
CVE-2023-30837
vyper vulnerable to storage allocator overflow
Critical
ghsa-83fm-w79m-64r5
Remote file access vulnerability in `mlflow server` and `mlflow ui` CLIs
High
CVE-2023-30629
Incorrect success value returned in vyper
High
CVE-2023-30620
mindsdb arbitrary file write when extracting a remotely retrieved Tarball
Medium
CVE-2022-23522
Arbitrary file write in mindsdb when Extracting Tarballs retrieved from a remote location
High
CVE-2023-26043
GeoServer style upload functionality vulnerable to XML External Entity (XXE) injection
Medium
CVE-2023-23940
OpenZeppelin Contracts contains Improper Verification of Cryptographic Signature
Medium
CVE-2023-0591
ubireader_extract_files is vulnerable to path traversal when run against specifically crafted UBIFS files, allowing the attacker to overwrite files outside of the extraction directory (provided the pr
Medium
CVE-2022-4572
A vulnerability, which was classified as problematic, has been found in UBI Reader up to 0.8.0. Affected by this issue is the function ubireader_extract_files of the file ubireader/ubifs/output.py of
Low
CVE-2022-23531
GuardDog vulnerable to arbitrary file write when scanning a specially-crafted PyPI package
Low
CVE-2022-23530
GuardDog vulnerable to arbitrary file write when scanning a specially-crafted remote PyPI package
Critical
CVE-2022-44900
A directory traversal vulnerability in the SevenZipFile.extractall() function of the python library py7zr v0.20.0 and earlier allows attackers to write arbitrary files via extracting a crafted 7z file
Medium
CVE-2022-41889
Segfault via invalid attributes in `pywrap_tfe_src.cc`
High
CVE-2022-40604
In Apache Airflow 2.3.0 through 2.3.4, part of a url was unnecessarily formatted, allowing for possible information extraction.
High
CVE-2022-34749
Mistune vulnerable to catastrophic backtracking
Critical
CVE-2022-34265
Django `Trunc()` and `Extract()` database functions vulnerable to SQL Injection
High
CVE-2022-29255
Multiple evaluation of contract address in call in vyper
Medium
CVE-2014-4301
Multiple cross-site scripting (XSS) vulnerabilities in the respond_error function in routing.py in Eugene Pankov Ajenti before 1.2.21.7 allow remote attackers to inject arbitrary web script or HTML vi
High
CVE-2008-5646
Unspecified vulnerability in Trac before 0.11.2 allows attackers to cause a denial of service via unknown attack vectors related to "certain wiki markup."
Medium
CVE-2008-5647
Unspecified vulnerability in the HTML sanitizer filter in Trac before 0.11.2 allows attackers to conduct phishing attacks via unknown attack vectors.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.