Medium
CVE-2023-27115
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,855
Reset filters
High
CVE-2023-27117
WebAssembly v1.0.29 was discovered to contain a heap overflow via the component component wabt::Node::operator.
Medium
CVE-2023-27119
WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::Decompiler::WrapChild.
High
CVE-2023-27476
OWSLib vulnerable to XML External Entity (XXE) Injection
High
CVE-2023-27522
Apache HTTP Server via mod_proxy_uwsgi HTTP response smuggling
Low
CVE-2022-4134
A flaw was found in openstack-glance. This issue could allow a remote, authenticated attacker to tamper with images, compromising the integrity of virtual machines created using these modified images.
High
CVE-2023-27891
rami.io pretix before 4.17.1 allows OAuth application authorization from a logged-out session. The fixed versions are 4.15.1, 4.16.1, and 4.17.1.
High
CVE-2023-23929
vantage6 refresh tokens do not expire
High
CVE-2023-22738
vantage6 vulnerable to Improper Preservation of Permissions
Medium
CVE-2022-39228
vantage6 is a privacy preserving federated learning infrastructure for secure insight exchange. vantage6 does not inform the user of wrong username/password combination if the username actually exists
High
CVE-2023-26043
GeoServer style upload functionality vulnerable to XML External Entity (XXE) injection
Critical
CVE-2023-25696
Apache Airflow Hive Provider Improper Input Validation vulnerability
Critical
CVE-2023-25691
Apache Airflow Google Provider Improper Input Validation vulnerability
Critical
CVE-2023-25693
Apache Airflow Sqoop Provider Improper Input Validation vulnerability
Medium
CVE-2023-25823
Update share links to use FRP instead of SSH tunneling
High
CVE-2023-26302
Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input.
High
CVE-2023-26303
Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input.
Medium
CVE-2023-0949
Cross-site Scripting (XSS) - Reflected in GitHub repository modoboa/modoboa prior to 2.0.5.
High
CVE-2023-25657
Nautobot vulnerable to remote code execution via Jinja2 template rendering
Medium
CVE-2023-24769
Changedetection.io before v0.40.1.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the main page. This vulnerability allows attackers to execute arbitrary web scripts o
High
CVE-2021-33926
Server-Side Request Forgery in Plone CMS
Unrated
CVE-2021-33226
Buffer Overflow vulnerability in Saltstack v.3003 and before allows attacker to execute arbitrary code via the func variable in salt/salt/modules/status.py file.
High
CVE-2023-25578
Denial of service vulnerability when parsing multipart request body
High
CVE-2023-24580
An issue was discovered in the Multipart Request Parser in Django 3.2 before 3.2.18, 4.0 before 4.0.10, and 4.1 before 4.1.7. Passing certain inputs (e.g., an excessive number of parts) to multipart f
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.