Tagged “osv”
CVEs tagged osv, newest first.
7203 CVEsRSS
CVE-2024-0727Medium· 5.5Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack Impact summary: Applications loading files in the PKCS12 format from untrusted sources might termina…
Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack Impact summary: Applications loading files in the PKCS12 format from untrusted sources might termina…
CVE-2023-47115High· 7.1PoCCross-site Scripting Vulnerability on Avatar Upload
Cross-site Scripting Vulnerability on Avatar Upload
CVE-2024-23633Medium· 4.7Cross-site Scripting Vulnerability on Data Import
Cross-site Scripting Vulnerability on Data Import
CVE-2023-49657Critical· 9.6Cross-site Scripting in Apache superset
Cross-site Scripting in Apache superset
CVE-2024-58265NoneUnauthenticated Nonce Increment in snow
Unauthenticated Nonce Increment in snow
CVE-2024-23644NoneImproper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')
Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')
CVE-2024-23345High· 7.1XSS potential in rendered Markdown fields (comments, description, notes, etc.)
XSS potential in rendered Markdown fields (comments, description, notes, etc.)
CVE-2024-23329Low· 3.7changedetection.io API endpoint is not secured with API token
changedetection.io API endpoint is not secured with API token
CVE-2024-23341Medium· 6.1html injection vulnerability in the `tuitse_html` function.
html injection vulnerability in the `tuitse_html` function.
CVE-2024-23342High· 7.4Minerva timing attack on P-256 in python-ecdsa
Minerva timing attack on P-256 in python-ecdsa
CVE-2024-23730Critical· 9.8Unsafe yaml deserialization in llama-hub
Unsafe yaml deserialization in llama-hub
CVE-2024-58266NoneMultiple issues involving quote API
Multiple issues involving quote API
CVE-2024-0521Critical· 9.3Code Injection in paddlepaddle
Code Injection in paddlepaddle
CVE-2024-23332Medium· 4.0Go package github.com/notaryproject/notation configured with permissive trust policies potentially susceptible to rollback attack from co…
Go package github.com/notaryproject/notation configured with permissive trust policies potentially susceptible to rollback attack from compromised registry
CVE-2024-22416Critical· 9.6PoCCross-Site Request Forgery on any API call in pyLoad may lead to admin privilege escalation
Cross-Site Request Forgery on any API call in pyLoad may lead to admin privilege escalation
CVE-2023-50447High· 8.1Arbitrary Code Execution in Pillow
Arbitrary Code Execution in Pillow
CVE-2024-22419High· 7.3concat built-in can corrupt memory in vyper
concat built-in can corrupt memory in vyper
CVE-2024-22424High· 8.3github.com/argoproj/argo-cd Cross-Site Request Forgery vulnerability
github.com/argoproj/argo-cd Cross-Site Request Forgery vulnerability
CVE-2024-22420Medium· 6.5JupyterLab vulnerable to SXSS in Markdown Preview
JupyterLab vulnerable to SXSS in Markdown Preview
CVE-2024-22421High· 7.6JupyterLab vulnerable to potential authentication and CSRF tokens leak
JupyterLab vulnerable to potential authentication and CSRF tokens leak
CVE-2024-0669High· 7.1Cross-Frame Scripting vulnerability has been found on Plone CMS
Cross-Frame Scripting vulnerability has been found on Plone CMS
CVE-2024-22415High· 7.3Unsecured endpoints in the jupyter-lsp server extension
Unsecured endpoints in the jupyter-lsp server extension
CVE-2023-6395Medium· 6.7Privilege escalation for users that can access mock configuration
Privilege escalation for users that can access mock configuration
CVE-2023-52289High· 7.5Path traversal in flaskcode
Path traversal in flaskcode
CVE-2023-52288High· 7.5Path traversal in flaskcode
Path traversal in flaskcode
CVE-2024-22199Critical· 9.3Django Template Engine Vulnerable to XSS
Django Template Engine Vulnerable to XSS
CVE-2024-22194Low· 2.2cdo-local-uuid vulnerable to insertion of artifact derived from developer's Present Working Directory into demonstration code
cdo-local-uuid vulnerable to insertion of artifact derived from developer's Present Working Directory into demonstration code
CVE-2024-22195Medium· 5.4Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter
Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter
CVE-2024-22190High· 7.8Untrusted search path under some conditions on Windows allows arbitrary code execution
Untrusted search path under some conditions on Windows allows arbitrary code execution
CVE-2023-49569Critical· 9.8Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients
Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients