High
CVE-2021-4286
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,855
Reset filters
High
CVE-2022-45197
Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker to pose as any server in the eyes of Slixmpp.
High
CVE-2022-40899
An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header from malicious web server.
High
CVE-2022-40898
An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli.
High
CVE-2022-40897
pypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS)
Medium
CVE-2022-4644
Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.4.
High
CVE-2022-4646
Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.5.4.
Medium
CVE-2022-4638
A vulnerability classified as problematic was found in collective.contact.widget up to 1.12. This vulnerability affects the function title of the file src/collective/contact/widget/widgets.py. The man
Critical
CVE-2022-46421
Apache Airflow Hive Provider vulnerable to Command Injection
High
CVE-2022-44940
Patchelf out-of-bounds read
Medium
CVE-2022-4572
A vulnerability, which was classified as problematic, has been found in UBI Reader up to 0.8.0. Affected by this issue is the function ubireader_extract_files of the file ubireader/ubifs/output.py of
Low
CVE-2022-23531
GuardDog vulnerable to arbitrary file write when scanning a specially-crafted PyPI package
Low
CVE-2022-23530
GuardDog vulnerable to arbitrary file write when scanning a specially-crafted remote PyPI package
Medium
CVE-2022-4526
A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected by this issue is some unknown functionality of the file photologue/templates/photologue/photo_detail
Medium
CVE-2022-4527
A vulnerability was found in collective.task up to 3.0.9. It has been classified as problematic. This affects the function renderCell/AssignedGroupColumn of the file src/collective/task/browser/table.
Medium
CVE-2022-32531
Apache Bookkeeper vulnerable to Improper Certificate Validation
Medium
CVE-2022-4495
A vulnerability, which was classified as problematic, has been found in collective.dms.basecontent up to 1.6. This issue affects the function renderCell of the file src/collective/dms/basecontent/brow
High
CVE-2019-25078
A vulnerability classified as problematic was found in pacparser up to 1.3.x. Affected by this vulnerability is the function pacparser_find_proxy of the file src/pacparser.c. The manipulation of the a
Critical
CVE-2022-4314
Improper Privilege Management in GitHub repository ikus060/rdiffweb prior to 2.5.2.
Medium
CVE-2022-23485
Sentry vulnerable to invite code reuse via cookie manipulation
Medium
CVE-2022-23491
Certifi removing TrustCor root certificate
Critical
CVE-2022-46742
PaddlePaddle vulnerable to Code Injection
Critical
CVE-2022-44900
A directory traversal vulnerability in the SevenZipFile.extractall() function of the python library py7zr v0.20.0 and earlier allows attackers to write arbitrary files via extracting a crafted 7z file
High
CVE-2022-23472
Passeo uses insecure random number generator
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.