Medium
CVE-2022-0352
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,834
Reset filters
High
CVE-2021-22570
Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked call into the proto file's name during generation of the resulting error me
High
CVE-2021-32849
An authenticated user can execute arbitrary command in Gerapy
Medium
CVE-2022-0338
Improper Privilege Management in Conda loguru prior to 0.5.3.
Medium
CVE-2022-21697
SSRF vulnerability in jupyter-server-proxy
Critical
CVE-2021-4171
calibre-web is vulnerable to Business Logic Errors
Medium
CVE-2021-44217
Cross-site Scripting in Ericsson CodeChecker
Medium
ghsa-rcrv-228c-gprj
Invalid URL generation in bitlyshortener
Medium
CVE-2021-45230
Improper Privilege Management in apache-airflow
High
CVE-2022-21699
Execution with Unnecessary Privileges in ipython
Medium
CVE-2022-21694
Incorrect Permission Assignment for Critical Resource in OnionShare
Medium
CVE-2022-21692
Improper Access Control in Onionshare
Medium
CVE-2022-21690
OTF-001: Improper Input Sanitation: The path parameter of the requested URL is not sanitized before being passed to the QT frontend
Medium
CVE-2022-21695
Improper Access Control in Onionshare
Medium
CVE-2022-21693
Path traversal in Onionshare
Medium
CVE-2022-21691
Improper Access Control in Onionshare
High
CVE-2022-21689
Denial of Service in Onionshare
High
CVE-2022-21688
Out-of-bounds Read in Onionshare
Medium
CVE-2022-21696
Username spoofing in OnionShare
Medium
CVE-2022-21683
Comment reply notifications sent to incorrect users
Medium
CVE-2021-44649
Cross-site Scripting in django-cms
Medium
CVE-2022-22821
Path Traversal in nemo-toolkit
High
CVE-2022-21668
Pipenv's requirements.txt parsing allows malicious index url in comments
Critical
CVE-2022-22817
Arbitrary expression injection in Pillow
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.