Tagged “osv”
CVEs tagged osv, newest first.
7207 CVEsRSS
CVE-2023-46402High· 7.5Inefficient Regular Expression Complexity in git-urls
Inefficient Regular Expression Complexity in git-urls
CVE-2023-6019Critical· 9.8PoCRay OS Command Injection vulnerability
Ray OS Command Injection vulnerability
CVE-2023-48052High· 7.4HTTPie allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack
HTTPie allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack
CVE-2023-6020Critical· 9.3PoCRay Missing Authorization vulnerability
Ray Missing Authorization vulnerability
CVE-2023-6021Critical· 9.3PoCRay Path Traversal vulnerability
Ray Path Traversal vulnerability
CVE-2023-48224High· 8.2Ethyca Fides Cryptographically Weak Generation of One-Time Codes for Identity Verification
Ethyca Fides Cryptographically Weak Generation of One-Time Codes for Identity Verification
CVE-2023-6022High· 8.8Cross-Site Request Forgery vulnerability in Prefect
Cross-Site Request Forgery vulnerability in Prefect
CVE-2023-5189Medium· 6.3Ansible galaxy-importer Path Traversal vulnerability
Ansible galaxy-importer Path Traversal vulnerability
CVE-2023-46121Medium· 5.0yt-dlp Generic Extractor MITM Vulnerability via Arbitrary Proxy Injection
yt-dlp Generic Extractor MITM Vulnerability via Arbitrary Proxy Injection
CVE-2023-47631High· 7.2vantage6-server node accepts non-whitelisted algorithms from malicious server
vantage6-server node accepts non-whitelisted algorithms from malicious server
CVE-2023-47627Medium· 5.3AIOHTTP has problems in HTTP parser (the python one, not llhttp)
AIOHTTP has problems in HTTP parser (the python one, not llhttp)
CVE-2023-47117High· 7.5PoCLabel Studio Object Relational Mapper Leak Vulnerability in Filtering Task
Label Studio Object Relational Mapper Leak Vulnerability in Filtering Task
CVE-2023-47630High· 7.1⚠ Exploited0dayAttacker can cause Kyverno user to unintentionally consume insecure image
Attacker can cause Kyverno user to unintentionally consume insecure image
CVE-2023-5954High· 7.5HashiCorp Vault Missing Release of Memory after Effective Lifetime vulnerability
HashiCorp Vault Missing Release of Memory after Effective Lifetime vulnerability
CVE-2023-47248Critical· 9.8PoCPyArrow: Arbitrary code execution when loading a malicious data file
PyArrow: Arbitrary code execution when loading a malicious data file
CVE-2023-46445Medium· 5.3AsyncSSH Rogue Extension Negotiation
AsyncSSH Rogue Extension Negotiation
CVE-2023-46446High· 8.1AsyncSSH Rogue Session Attack
AsyncSSH Rogue Session Attack
CVE-2023-47111High· 7.3ZITADEL race condition in lockout policy execution
ZITADEL race condition in lockout policy execution
CVE-2023-47114Medium· 4.3Ethyca Fides HTML Injection Vulnerability in HTML-Formatted DSR Packages
Ethyca Fides HTML Injection Vulnerability in HTML-Formatted DSR Packages
CVE-2023-46254Medium· 4.3capsule-proxy service discloses Namespaces of colliding tenants to owners of different tenants with the same ServiceAccount name
capsule-proxy service discloses Namespaces of colliding tenants to owners of different tenants with the same ServiceAccount name
CVE-2023-41378High· 7.5Calico Typha denial of service vulnerability
Calico Typha denial of service vulnerability
MAL-2023-8429NoneMalicious code in littest (crates.io)
Malicious code in littest (crates.io)
CVE-2023-42456Low· 3.1sudo-rs: Path Traversal vulnerability
sudo-rs: Path Traversal vulnerability
CVE-2023-3676High· 8.8Kubernetes privilege escalation vulnerability
Kubernetes privilege escalation vulnerability
CVE-2023-43796Medium· 5.3Synapse vulnerable to leak of remote user device information
Synapse vulnerable to leak of remote user device information
CVE-2023-46250Medium· 5.1Possible Infinite Loop when PdfWriter(clone_from) is used with a PDF
Possible Infinite Loop when PdfWriter(clone_from) is used with a PDF
CVE-2023-46239High· 7.5quic-go vulnerable to pointer dereference that can lead to panic
quic-go vulnerable to pointer dereference that can lead to panic
CVE-2021-25736Medium· 5.8Kube-proxy may unintentionally forward traffic
Kube-proxy may unintentionally forward traffic
CVE-2023-46215High· 7.5Apache Airflow Celery provider Insertion of Sensitive Information into Log File vulnerability
Apache Airflow Celery provider Insertion of Sensitive Information into Log File vulnerability
CVE-2023-41893Medium· 4.3Home Assistant vulnerable to account takeover via auth_callback login
Home Assistant vulnerable to account takeover via auth_callback login