Medium
CVE-2023-52302
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 246
Reset filters
Medium
CVE-2023-49438
An open redirect vulnerability in the python package Flask-Security-Too <=5.3.2 allows attackers to redirect unsuspecting users to malicious sites via a crafted URL by abusing the ?next parameter on t
High
CVE-2023-46446
AsyncSSH Rogue Session Attack
High
CVE-2023-47117
Label Studio Object Relational Mapper Leak Vulnerability in Filtering Task
Critical
CVE-2023-43791
Label Studio has Hardcoded Django `SECRET_KEY` that can be Abused to Forge Session Tokens
High
CVE-2023-46128
Nautobot vulnerable to exposure of hashed user passwords via REST API
Low
CVE-2023-23934
Incorrect parsing of nameless cookies leads to __Host- cookies bypass
Low
CVE-2022-23530
GuardDog vulnerable to arbitrary file write when scanning a specially-crafted remote PyPI package
Medium
CVE-2022-36046
Next.js is a React framework that can provide building blocks to create web applications. All of the following must be true to be affected by this CVE: Next.js version 12.2.3, Node.js version above v1
Medium
CVE-2021-3702
ansible-runner vulnerable to Race Condition
Medium
CVE-2022-30187
Microsoft: CBC Padding Oracle in Azure Blob Storage Encryption Library
Critical
CVE-2022-24840
Path Traversal in django-s3file
Medium
CVE-2020-29565
An issue was discovered in OpenStack Horizon before 15.3.2, 16.x before 16.2.1, 17.x and 18.x before 18.3.3, 18.4.x, and 18.5.x. There is a lack of validation of the "next" parameter, which would allo
High
CVE-2013-4200
The isURLInPortal method in the URLTool class in in_portal.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 treats URLs starting with a space as a relative URL, which allows r
Medium
CVE-2013-0342
The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which makes it easier for remote attackers to spoof packets by predicting the next ID, a different vulnerability than
Medium
CVE-2021-32805
Flask-AppBuilder Open Redirect vulnerability
High
CVE-2021-37648
Incorrect validation of `SaveV2` inputs
High
CVE-2021-37647
Null pointer dereference in `SparseTensorSliceDataset`
High
CVE-2021-32629
Memory access due to code generation flaw in Cranelift module
Low
CVE-2021-32618
Open Redirect in Flask-Security-Too
Low
CVE-2021-29532
Heap out of bounds read in `RaggedCross`
Low
CVE-2021-29530
Invalid validation in `SparseMatrixSparseCholesky`
Low
CVE-2021-29513
Type confusion during tensor casts lead to dereferencing null pointers
Medium
CVE-2021-21360
Exposure of Sensitive Information to an Unauthorized Actor in Products.GenericSetup
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.