High
CVE-2023-33977
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,855
Reset filters
High
CVE-2023-34395
Apache Airflow ODBC Provider Argument Injection vulnerability
High
CVE-2023-22886
Apache Airflow JDBC Provider Improper Input Validation vulnerability
High
CVE-2023-32309
Any file can be included with the pymdown-snippets extension
High
CVE-2023-29005
Flask-AppBuilder Has No Rate Limiting on Login AUTH DB
Medium
CVE-2022-2525
Improper Restriction of Excessive Authentication Attempts in calibreweb
Medium
CVE-2023-25392
Allegro Tech BigFlow vulnerable to Missing SSL Certificate Validation
High
CVE-2023-2106
Weak Password Requirements in calibreweb
High
CVE-2023-30613
Unrestricted file upload in kiwi TCMS
Low
CVE-2023-30544
kiwi TCMS has possibility for user to update email address to unverified one
High
CVE-2023-32758
git-url-parse Regular Expression Denial of Service
High
CVE-2023-25663
TensorFlow has Null Pointer Error in TensorArrayConcatV2
High
CVE-2023-25660
TensorFlow vulnerable to seg fault in `tf.raw_ops.Print`
High
CVE-2023-25662
TensorFlow vulnerable to integer overflow in EditDistance
High
CVE-2023-25665
TensorFlow has Null Pointer Error in SparseSparseMaximum
High
CVE-2023-25664
TensorFlow has Heap-buffer-overflow in AvgPoolGrad
Medium
CVE-2023-0241
pgAdmin 4 vulnerable to directory traversal
Low
CVE-2023-26112
configobj ReDoS exploitable by developer using values in a server-side configuration file
High
CVE-2023-27489
Kiwi TCMS Stored Cross-site Scripting via SVG file
High
CVE-2023-28710
Apache Airflow Spark Provider vulnerable to improper input validation
High
CVE-2023-25670
TensorFlow has Null Pointer Error in QuantizedMatMulWithBiasAndDequantize
High
CVE-2023-25669
TensorFlow has Floating Point Exception in AvgPoolGrad with XLA
Medium
CVE-2022-3146
tripleo-ansible may disclose important configuration details from an OpenStack deployment
Medium
CVE-2022-3101
tripleo-ansible may disclose important configuration details from an OpenStack deployment
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.