Tagged “osv”
CVEs tagged osv, newest first.
7207 CVEsRSS
CVE-2023-4570High· 8.8NI MeasurementLink Python Services Improper Access Restriction vulnerability
NI MeasurementLink Python Services Improper Access Restriction vulnerability
CVE-2023-44378Medium· 5.5gnark unsoundness in variable comparison / non-unique binary decomposition
gnark unsoundness in variable comparison / non-unique binary decomposition
CVE-2023-44389Low· 3.1Zope management interface vulnerable to stored cross site scripting via the title property
Zope management interface vulnerable to stored cross site scripting via the title property
CVE-2023-4237Medium· 6.5Ansible may expose private key
Ansible may expose private key
CVE-2023-43804Medium· 5.9PoC`Cookie` HTTP header isn't stripped on cross-origin redirects
`Cookie` HTTP header isn't stripped on cross-origin redirects
CVE-2023-43654Critical· 9.8PoCTorchServe Server-Side Request Forgery vulnerability
TorchServe Server-Side Request Forgery vulnerability
CVE-2023-43810High· 7.5opentelemetry-instrumentation Denial of Service vulnerability due to unbound cardinality metrics
opentelemetry-instrumentation Denial of Service vulnerability due to unbound cardinality metrics
CVE-2023-5077High· 7.6Hashicorp Vault Incorrect Permission Assignment for Critical Resource vulnerability
Hashicorp Vault Incorrect Permission Assignment for Critical Resource vulnerability
CVE-2023-44464High· 7.8pretix allows Pillow to parse EPS files
pretix allows Pillow to parse EPS files
CVE-2023-43645Medium· 5.9OpenFGA Vulnerable to DoS from circular relationship definitions
OpenFGA Vulnerable to DoS from circular relationship definitions
CVE-2023-40026Medium· 5.0Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server
Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server
CVE-2023-41333Medium· 6.9Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy
Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy
CVE-2023-41332Low· 3.5Specific Cilium configurations vulnerable to DoS via Kubernetes annotations
Specific Cilium configurations vulnerable to DoS via Kubernetes annotations
CVE-2023-42453Low· 3.1matrix-synapse vulnerable to improper validation of receipts allows forged read receipts
matrix-synapse vulnerable to improper validation of receipts allows forged read receipts
CVE-2023-41335Low· 3.7matrix-synapse vulnerable to temporary storage of plaintext passwords during password changes
matrix-synapse vulnerable to temporary storage of plaintext passwords during password changes
CVE-2023-41419Critical· 9.8Gevent allows remote attacker to escalate privileges
Gevent allows remote attacker to escalate privileges
CVE-2023-43364Critical· 9.8PoCSearchor CLI's Search vulnerable to Arbitrary Code using Eval
Searchor CLI's Search vulnerable to Arbitrary Code using Eval
CVE-2023-40581High· 8.3yt-dlp on Windows vulnerable to `--exec` command injection when using `%q`
yt-dlp on Windows vulnerable to `--exec` command injection when using `%q`
CVE-2023-1636Medium· 6.0OpenStack Barbican information disclosure vulnerability
OpenStack Barbican information disclosure vulnerability
CVE-2023-1633Medium· 6.6OpenStack Barbican credential leak flaw
OpenStack Barbican credential leak flaw
CVE-2023-1625High· 7.4OpenStack Heat information leak vulnerability
OpenStack Heat information leak vulnerability
CVE-2022-3962Medium· 4.3Kiali content spoofing vulnerability
Kiali content spoofing vulnerability
CVE-2023-5002Medium· 6.0pgAdmin failed to properly control the server code
pgAdmin failed to properly control the server code
GHSA-v8gr-m533-ghj9LowVulnerable OpenSSL included in cryptography wheels
Vulnerable OpenSSL included in cryptography wheels
CVE-2023-43669High· 7.5Tungstenite allows remote attackers to cause a denial of service
Tungstenite allows remote attackers to cause a denial of service
CVE-2023-42458Low· 3.7Zope vulnerable to Stored Cross Site Scripting with SVG images
Zope vulnerable to Stored Cross Site Scripting with SVG images
CVE-2023-43621Medium· 4.7Croc may expose secret to local users
Croc may expose secret to local users
CVE-2023-43618Medium· 5.3Croc requires senders to provide local IP addresses in cleartext
Croc requires senders to provide local IP addresses in cleartext
CVE-2023-43620High· 7.8Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device
Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device
CVE-2023-42439High· 7.5GeoNode vulnerable to SSRF Bypass to return internal host data
GeoNode vulnerable to SSRF Bypass to return internal host data