Tagged “ghsa”
CVEs tagged ghsa, newest first.
5758 CVEsRSS
CVE-2022-40189Critical· 9.8OS Command Injection in Apache Airflow
OS Command Injection in Apache Airflow
CVE-2022-38649Critical· 9.8OS Command Injection in Apache Airflow
OS Command Injection in Apache Airflow
CVE-2022-39366Critical· 9.9acryl-datahub missing JWT signature check
acryl-datahub missing JWT signature check
CVE-2022-31008High· 7.5⚖ disputedrabbitmq-server: URI encryption with predictable secret seed (CVE-2022-31008)
A flaw was found in RabbitMQ. The shovel and federation plugins perform URI obfuscation in their worker (link) state. The encryption key used to encrypt the URI was seeded with a predictable secret. In certain exceptions related to Shovel …
CVE-2022-39135Critical· 9.8Apache Calcite before 1.32.0 vulnerable to potential XML External Entity (XXE) attack
Apache Calcite before 1.32.0 vulnerable to potential XML External Entity (XXE) attack
CVE-2021-3563Critical· 9.1Openstack Keystone Incorrect Authorization vulnerability
Openstack Keystone Incorrect Authorization vulnerability
GHSA-pcjh-6r5h-r92rHighdjango-sendfile2 before 0.7.0 contains reflected file download vulnerability
django-sendfile2 before 0.7.0 contains reflected file download vulnerability
CVE-2022-31573Critical· 9.3ChainerRL Visualizer 0.1.1 vulnerable to Path Traversal via unsafe use of send_file function
ChainerRL Visualizer 0.1.1 vulnerable to Path Traversal via unsafe use of send_file function
CVE-2022-24840Critical· 9.1Path Traversal in django-s3file
Path Traversal in django-s3file
CVE-2022-30765Critical· 9.8SQL injection in calibreweb
SQL injection in calibreweb
CVE-2016-8638Critical· 9.1Session Fixation in ipsilon
Session Fixation in ipsilon
CVE-2017-1000469Critical· 9.8Cobbler vulnerable to arbitrary code execution
Cobbler vulnerable to arbitrary code execution
CVE-2018-1000226Critical· 9.8PoCCobbler Improper Validation of Security Tokens
Cobbler Improper Validation of Security Tokens
CVE-2018-10931Critical· 9.8Cobbler has Exposed Dangerous Method or Function
Cobbler has Exposed Dangerous Method or Function
CVE-2022-23064High· 8.8snipe-IT vulnerable to host header injection
snipe-IT vulnerable to host header injection
CVE-2022-0767Critical· 9.9Server-Side Request Forgery in calibreweb
Server-Side Request Forgery in calibreweb
CVE-2022-0766Critical· 9.8Server-Side Request Forgery in calibreweb
Server-Side Request Forgery in calibreweb
CVE-2022-0577Medium· 6.5Incorrect Authorization and Exposure of Sensitive Information to an Unauthorized Actor in scrapy
Incorrect Authorization and Exposure of Sensitive Information to an Unauthorized Actor in scrapy
CVE-2021-4171Critical· 9.8calibre-web is vulnerable to Business Logic Errors
calibre-web is vulnerable to Business Logic Errors
CVE-2021-45046Critical· 9.0CISA KEVPoCIncomplete fix for Apache Log4j vulnerability
Incomplete fix for Apache Log4j vulnerability
GHSA-593v-wcqx-hq2wHigh· 7.5Incorrect version tags linked to external repository
Incorrect version tags linked to external repository
CVE-2021-39177High· 7.4User impersonation due to incorrect handling of the login JWT
User impersonation due to incorrect handling of the login JWT
CVE-2021-32822Medium· 4.0hbs: Insertion of Sensitive Information into Externally-Accessible File or Directory and Exposure of Sensitive Information to an Unauthorized Actor
hbs: Insertion of Sensitive Information into Externally-Accessible File or Directory and Exposure of Sensitive Information to an Unauthorized Actor
CVE-2019-19921Medium· 5.0opencontainers runc contains procfs race condition with a shared volume mount
opencontainers runc contains procfs race condition with a shared volume mount
GHSA-jgpv-4h4c-xhw3High· 7.5Duplicate Advisory: Uncontrolled Resource Consumption in pillow
Duplicate Advisory: Uncontrolled Resource Consumption in pillow
GHSA-6r3c-8xf3-ggrrMediumDirectory traversal outside of SENDFILE_ROOT in django-sendfile2
Directory traversal outside of SENDFILE_ROOT in django-sendfile2
CVE-2020-10571Critical· 9.8Potential buffer overflow in psd-tools
Potential buffer overflow in psd-tools
CVE-2018-1000164High· 7.5Gunicorn contains Improper Neutralization of CRLF sequences in HTTP headers
Gunicorn contains Improper Neutralization of CRLF sequences in HTTP headers