High
CVE-2023-32786
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,016
Reset filters
Medium
CVE-2023-46134
dtale vulnerable to Remote Code Execution through the Custom Filter Input
Medium
CVE-2023-46125
Fides Information Disclosure Vulnerability in Config API Endpoint
High
CVE-2023-46124
Fides Server-Side Request Forgery Vulnerability in Custom Integration Upload
Low
CVE-2023-46126
Fides JavaScript Injection Vulnerability in Privacy Center URL
High
CVE-2023-43810
opentelemetry-instrumentation Denial of Service vulnerability due to unbound cardinality metrics
Medium
CVE-2023-5002
pgAdmin failed to properly control the server code
High
CVE-2023-4785
Denial of Service Vulnerability in gRPC TCP Server (Posix-compatible platforms)
Low
CVE-2023-41329
Domain restrictions bypass via DNS Rebinding in WireMock and WireMock Studio webhooks, proxy and recorder modes
High
CVE-2023-41319
Remote Code Execution in Custom Integration Upload
High
CVE-2023-27604
Airflow Sqoop Provider RCE Vulnerability
High
CVE-2023-33953
Excessive Iteration in gRPC
High
CVE-2023-40272
Apache Airflow Spark Provider Improper Input Validation vulnerability
Medium
CVE-2023-39523
ScanCode.io command injection in docker image fetch process
Low
CVE-2023-37481
Fides Webserver Vulnerable to SVG Bomb File Uploads
Low
CVE-2023-37480
Fides Webserver Vulnerable to Zip Bomb File Uploads
High
CVE-2023-38200
Keylime's registrar vulnerable to Denial-of-service attack via a single open connection
Medium
CVE-2023-35934
yt-dlp File Downloader cookie leak
Medium
CVE-2023-32732
gRPC connection termination issue
High
CVE-2023-36809
Kiwi TCMS's misconfigured HTTP headers allow stored XSS execution with Firefox
High
CVE-2023-33977
kiwitcms vulnerable to stored cross-site scripting via unrestricted file upload
High
CVE-2023-22886
Apache Airflow JDBC Provider Improper Input Validation vulnerability
Low
CVE-2023-26112
configobj ReDoS exploitable by developer using values in a server-side configuration file
High
CVE-2023-27489
Kiwi TCMS Stored Cross-site Scripting via SVG file
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.