Low
CVE-2023-33185
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,359
Reset filters
Medium
CVE-2023-32681
Unintended leak of Proxy-Authorization header in requests
Medium
CVE-2023-32323
Synapse Outgoing federation to specific hosts can be disabled by sending malicious invites
High
CVE-2022-39374
Synapse Denial of service due to incorrect application of event authorization rules during state resolution
High
CVE-2022-39335
Synapse does not apply enough checks to servers requesting auth events of events in a room
High
CVE-2023-32058
Vyper vulnerable to integer overflow in loop
Medium
ghsa-jjgp-whrp-gq8m
in-toto: PGP trust model not (fully) considered
Medium
CVE-2023-32076
in-toto vulnerable to Configuration Read From Local Directory
High
CVE-2023-31143
Mage-ai missing user authentication
High
CVE-2023-30837
vyper vulnerable to storage allocator overflow
Critical
CVE-2023-25754
Privilege Context Switching Error vulnerability in Apache Software Foundation Apache Airflow.This issue affects Apache Airflow: before 2.6.0.
Medium
CVE-2023-29247
Task instance details page in the UI is vulnerable to a stored XSS.This issue affects Apache Airflow: before 2.6.0.
High
CVE-2023-30861
Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header
High
CVE-2023-32007
** UNSUPPORTED WHEN ASSIGNED ** The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has
Critical
ghsa-83fm-w79m-64r5
Remote file access vulnerability in `mlflow server` and `mlflow ui` CLIs
High
CVE-2023-30628
Kiwi TCMS is an open source test management system. In kiwitcms/Kiwi v12.2 and prior and kiwitcms/enterprise v12.2 and prior,
High
CVE-2023-30629
Incorrect success value returned in vyper
High
CVE-2023-30620
mindsdb arbitrary file write when extracting a remotely retrieved Tarball
High
CVE-2023-30798
MultipartParser denial of service with too many fields or files
High
CVE-2023-30797
Lemur subject to insecure random generation
Medium
CVE-2023-30608
sqlparse contains a regular expression that is vulnerable to Regular Expression Denial of Service
High
CVE-2021-34337
An issue was discovered in Mailman Core before 3.3.5. An attacker with access to the REST API could use timing attacks to determine the value of the configured REST API password and then make arbitrar
High
CVE-2023-28707
Apache Airflow Drill Provider vulnerable to improper input validation
Critical
CVE-2023-28706
Apache Airflow Hive Provider vulnerable to code injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.