High
CVE-2023-25156
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
High
CVE-2023-25692
Apache Airflow Google Provider Improper Input Validation vulnerability
High
CVE-2023-0509
Improper Certificate Validation in pyload-ng
High
CVE-2022-4885
sviehb/jefferson vulnerable to path traversal
Medium
CVE-2022-4730
Graphite Web Cross-site Scripting vulnerability
Medium
CVE-2022-4729
Graphite Web Cross-site Scripting vulnerability
Medium
CVE-2023-0227
Pyload Insufficient Session Expiration vulnerability
Medium
CVE-2023-0055
Pyload contains Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
Medium
CVE-2023-0057
pyLoad vulnerable to Improper Restriction of Rendered UI Layers or Frames
Medium
CVE-2023-22298
pgAdmin 4 Open Redirect vulnerability
Medium
CVE-2019-25091
nsupdate.info has Sensitive Cookie Without 'HttpOnly' Flag
High
CVE-2022-38060
OpenStack Kolla sudo privilege escalation vulnerability
Medium
CVE-2022-4728
Graphite Web Cross-site Scripting vulnerability
Medium
CVE-2022-4396
pyRdfa3 Cross-site Scripting vulnerability
Medium
CVE-2022-4589
Terms and Conditions Module vulnerable to Open Redirect
Medium
CVE-2021-4287
binwalk vulnerable to UNIX Symbolic Link (Symlink) Following
High
CVE-2022-4223
pgadmin4 vulnerable to Code Injection
Medium
CVE-2022-4105
Cross-site Scripting in kiwitcms
Medium
CVE-2022-42965
snowflake-connector-python is vulnerable to Regular Expression Denial of Service (ReDoS)
High
CVE-2022-33684
Apache Pulsar Disabled Certificate Validation for OAuth Client Credential Requests makes C++/Python Clients vulnerable to MITM attack
High
CVE-2022-41547
MobSF allows attackers to read arbitrary files via a crafted HTTP request
High
CVE-2022-39254
When matrix-nio receives forwarded room keys, the receiver doesn't check if it requested the key from the forwarder
Medium
CVE-2022-3102
jwcrypto token substitution can lead to authentication bypass
Medium
CVE-2022-3355
Inventree vulnerable to Stored Cross-site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.