Tagged “osv”
CVEs tagged osv, newest first.
7207 CVEsRSS
CVE-2023-49569Critical· 9.8Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients
Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients
CVE-2024-21669Critical· 9.9Hyperledger Aries Cloud Agent Python result of presentation verification not checked for LDP-VC
Hyperledger Aries Cloud Agent Python result of presentation verification not checked for LDP-VC
CVE-2023-45139High· 7.5fonttools XML External Entity Injection (XXE) Vulnerability
fonttools XML External Entity Injection (XXE) Vulnerability
CVE-2024-21644High· 7.5PoCpyload Unauthenticated Flask Configuration Leakage vulnerability
pyload Unauthenticated Flask Configuration Leakage vulnerability
CVE-2024-21645Medium· 5.3PoCpyload Log Injection vulnerability
pyload Log Injection vulnerability
CVE-2024-52813NoneMissing facility to signal rotation of a verified cryptographic identity
Missing facility to signal rotation of a verified cryptographic identity
CVE-2023-30617Medium· 6.5Kruise allows leveraging the kruise-daemon pod to list all secrets in the entire cluster
Kruise allows leveraging the kruise-daemon pod to list all secrets in the entire cluster
CVE-2023-52323Medium· 5.9pycryptodome: side-channel leakage for OAEP decryption in PyCryptodome and pycryptodomex (CVE-2023-52323)
A flaw was found in PyCryptodome/pycryptodomex which may allow for side-channel leakage when performing OAEP decryption, which could be exploited to carry out a Manger attack.
CVE-2024-21642High· 7.5D-Tale server-side request forgery through Web uploads
D-Tale server-side request forgery through Web uploads
CVE-2023-46739Medium· 6.5CubeFS timing attack can leak user passwords
CubeFS timing attack can leak user passwords
CVE-2023-46740Medium· 6.5Insecure random string generator used for sensitive data
Insecure random string generator used for sensitive data
CVE-2023-38674Medium· 4.7PaddlePaddle floating point exception in paddle.nanmedian
PaddlePaddle floating point exception in paddle.nanmedian
CVE-2023-38676Medium· 4.7PaddlePaddle segfault in paddle.dot
PaddlePaddle segfault in paddle.dot
CVE-2023-52308Medium· 4.7PaddlePaddle floating point exception in paddle.amin
PaddlePaddle floating point exception in paddle.amin
CVE-2023-52305Medium· 4.7PaddlePaddle floating point exception in paddle.topk
PaddlePaddle floating point exception in paddle.topk
CVE-2023-52306Medium· 4.7PaddlePaddle floating point exception in paddle.lerp
PaddlePaddle floating point exception in paddle.lerp
CVE-2023-52311Critical· 9.6PaddlePaddle command injection in _wget_download
PaddlePaddle command injection in _wget_download
CVE-2023-52312Medium· 4.7PaddlePaddle nullptr dereference in paddle.crop
PaddlePaddle nullptr dereference in paddle.crop
CVE-2023-38678Medium· 4.7PaddlePaddle segfault in paddle.mode
PaddlePaddle segfault in paddle.mode
CVE-2023-38675Medium· 4.7PaddlePaddle floating point exception in paddle.linalg.matrix_rank
PaddlePaddle floating point exception in paddle.linalg.matrix_rank
CVE-2023-52310Critical· 9.6PaddlePaddle command injection in get_online_pass_interval
PaddlePaddle command injection in get_online_pass_interval
CVE-2023-52307High· 8.2PaddlePaddle stack overflow in paddle.linalg.lu_unpack
PaddlePaddle stack overflow in paddle.linalg.lu_unpack
CVE-2023-38677Medium· 4.7PaddlePaddle floating point exception in paddle.linalg.eig
PaddlePaddle floating point exception in paddle.linalg.eig
CVE-2023-52309High· 8.2PaddlePaddle heap buffer overflow in paddle.repeat_interleave
PaddlePaddle heap buffer overflow in paddle.repeat_interleave
CVE-2023-52302Medium· 4.7PaddlePaddle null pointer dereference in paddle.nextafter
PaddlePaddle null pointer dereference in paddle.nextafter
CVE-2023-52304High· 8.2PaddlePaddle stack overflow in paddle.searchsorted
PaddlePaddle stack overflow in paddle.searchsorted
CVE-2023-52314Critical· 9.6PaddlePaddle command injection in convert_shape_compare
PaddlePaddle command injection in convert_shape_compare
CVE-2023-52303Medium· 4.7PaddlePaddle segfault in paddle.put_along_axis
PaddlePaddle segfault in paddle.put_along_axis
CVE-2023-52313Medium· 4.7PaddlePaddle floating point exception in paddle.argmin and paddle.argmax
PaddlePaddle floating point exception in paddle.argmin and paddle.argmax
CVE-2024-21910Medium· 6.1Cross-site scripting vulnerability in TinyMCE plugins
TinyMCE versions before 5.10.0 are affected by a cross-site scripting vulnerability. A remote and unauthenticated attacker could introduce crafted image or link URLs that would result in the execution of arbitrary JavaScript in an editin…