Hoch
CVE-2023-37271
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 685
Filter zurücksetzen
Hoch
CVE-2023-36814
Products.CMFCore unauthenticated denial of service and crash via unchecked use of input with Python's marshal module
Hoch
CVE-2022-39335
Synapse does not apply enough checks to servers requesting auth events of events in a room
Mittel
CVE-2023-32675
Vyper's nonpayable default functions are sometimes payable
Hoch
CVE-2023-30837
vyper vulnerable to storage allocator overflow
Kritisch
ghsa-83fm-w79m-64r5
Remote file access vulnerability in `mlflow server` and `mlflow ui` CLIs
Hoch
CVE-2023-30629
Incorrect success value returned in vyper
Hoch
CVE-2023-30620
mindsdb arbitrary file write when extracting a remotely retrieved Tarball
Mittel
CVE-2022-23522
Arbitrary file write in mindsdb when Extracting Tarballs retrieved from a remote location
Hoch
CVE-2023-26043
GeoServer style upload functionality vulnerable to XML External Entity (XXE) injection
Mittel
CVE-2023-23940
OpenZeppelin Contracts contains Improper Verification of Cryptographic Signature
Mittel
CVE-2023-0591
ubireader_extract_files is vulnerable to path traversal when run against specifically crafted UBIFS files, allowing the attacker to overwrite files outside of the extraction directory (provided the pr
Mittel
CVE-2022-4572
A vulnerability, which was classified as problematic, has been found in UBI Reader up to 0.8.0. Affected by this issue is the function ubireader_extract_files of the file ubireader/ubifs/output.py of
Niedrig
CVE-2022-23531
GuardDog vulnerable to arbitrary file write when scanning a specially-crafted PyPI package
Niedrig
CVE-2022-23530
GuardDog vulnerable to arbitrary file write when scanning a specially-crafted remote PyPI package
Kritisch
CVE-2022-44900
A directory traversal vulnerability in the SevenZipFile.extractall() function of the python library py7zr v0.20.0 and earlier allows attackers to write arbitrary files via extracting a crafted 7z file
Mittel
CVE-2022-41889
Segfault via invalid attributes in `pywrap_tfe_src.cc`
Hoch
CVE-2022-40604
In Apache Airflow 2.3.0 through 2.3.4, part of a url was unnecessarily formatted, allowing for possible information extraction.
Hoch
CVE-2022-34749
Mistune vulnerable to catastrophic backtracking
Kritisch
CVE-2022-34265
Django `Trunc()` and `Extract()` database functions vulnerable to SQL Injection
Hoch
CVE-2022-29255
Multiple evaluation of contract address in call in vyper
Mittel
CVE-2014-4301
Multiple cross-site scripting (XSS) vulnerabilities in the respond_error function in routing.py in Eugene Pankov Ajenti before 1.2.21.7 allow remote attackers to inject arbitrary web script or HTML vi
Hoch
CVE-2008-5646
Unspecified vulnerability in Trac before 0.11.2 allows attackers to cause a denial of service via unknown attack vectors related to "certain wiki markup."
Mittel
CVE-2008-5647
Unspecified vulnerability in the HTML sanitizer filter in Trac before 0.11.2 allows attackers to conduct phishing attacks via unknown attack vectors.
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.