Mittel
CVE-2023-27115
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 6.855
Filter zurücksetzen
Hoch
CVE-2023-27117
WebAssembly v1.0.29 was discovered to contain a heap overflow via the component component wabt::Node::operator.
Mittel
CVE-2023-27119
WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::Decompiler::WrapChild.
Hoch
CVE-2023-27476
OWSLib vulnerable to XML External Entity (XXE) Injection
Hoch
CVE-2023-27522
Apache HTTP Server via mod_proxy_uwsgi HTTP response smuggling
Niedrig
CVE-2022-4134
A flaw was found in openstack-glance. This issue could allow a remote, authenticated attacker to tamper with images, compromising the integrity of virtual machines created using these modified images.
Hoch
CVE-2023-27891
rami.io pretix before 4.17.1 allows OAuth application authorization from a logged-out session. The fixed versions are 4.15.1, 4.16.1, and 4.17.1.
Hoch
CVE-2023-23929
vantage6 refresh tokens do not expire
Hoch
CVE-2023-22738
vantage6 vulnerable to Improper Preservation of Permissions
Mittel
CVE-2022-39228
vantage6 is a privacy preserving federated learning infrastructure for secure insight exchange. vantage6 does not inform the user of wrong username/password combination if the username actually exists
Hoch
CVE-2023-26043
GeoServer style upload functionality vulnerable to XML External Entity (XXE) injection
Kritisch
CVE-2023-25696
Apache Airflow Hive Provider Improper Input Validation vulnerability
Kritisch
CVE-2023-25691
Apache Airflow Google Provider Improper Input Validation vulnerability
Kritisch
CVE-2023-25693
Apache Airflow Sqoop Provider Improper Input Validation vulnerability
Mittel
CVE-2023-25823
Update share links to use FRP instead of SSH tunneling
Hoch
CVE-2023-26302
Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input.
Hoch
CVE-2023-26303
Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input.
Mittel
CVE-2023-0949
Cross-site Scripting (XSS) - Reflected in GitHub repository modoboa/modoboa prior to 2.0.5.
Hoch
CVE-2023-25657
Nautobot vulnerable to remote code execution via Jinja2 template rendering
Mittel
CVE-2023-24769
Changedetection.io before v0.40.1.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the main page. This vulnerability allows attackers to execute arbitrary web scripts o
Hoch
CVE-2021-33926
Server-Side Request Forgery in Plone CMS
Nicht bewertet
CVE-2021-33226
Buffer Overflow vulnerability in Saltstack v.3003 and before allows attacker to execute arbitrary code via the func variable in salt/salt/modules/status.py file.
Hoch
CVE-2023-25578
Denial of service vulnerability when parsing multipart request body
Hoch
CVE-2023-24580
An issue was discovered in the Multipart Request Parser in Django 3.2 before 3.2.18, 4.0 before 4.0.10, and 4.1 before 4.1.7. Passing certain inputs (e.g., an excessive number of parts) to multipart f
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.