Tagged “osv”
CVEs tagged osv, newest first.
7207 CVEsRSS
CVE-2023-42447High· 8.6blurhash: panic on parsing crafted blurhash inputs
blurhash: panic on parsing crafted blurhash inputs
CVE-2023-42444High· 8.6phonenumber: panic on parsing crafted RF3966 phonenumber inputs
phonenumber: panic on parsing crafted RF3966 phonenumber inputs
CVE-2023-42441Medium· 5.3Vyper has incorrect re-entrancy lock when key is empty string
Vyper has incorrect re-entrancy lock when key is empty string
CVE-2023-41626Medium· 4.8Gradio arbitrary file upload vulnerability
Gradio arbitrary file upload vulnerability
CVE-2023-4680Medium· 6.8HashiCorp Vault Improper Input Validation vulnerability
HashiCorp Vault Improper Input Validation vulnerability
RUSTSEC-2023-0085NoneHPACK decoder panics on invalid input
HPACK decoder panics on invalid input
CVE-2023-41267High· 7.8Apache HDFS Provider error message suggested
Apache HDFS Provider error message suggested
CVE-2023-4785High· 7.5Denial of Service Vulnerability in gRPC TCP Server (Posix-compatible platforms)
Denial of Service Vulnerability in gRPC TCP Server (Posix-compatible platforms)
CVE-2023-4863High· 8.8CISA KEV0dayPoClibwebp: OOB write in BuildHuffmanTable
libwebp: OOB write in BuildHuffmanTable
GHSA-jcr6-4frq-9gjjMediumUsers vulnerable to unaligned read of `*const *const c_char` pointer
Users vulnerable to unaligned read of `*const *const c_char` pointer
CVE-2023-41318Medium· 4.1matrix-media-repo: Unsafe media served inline on download endpoints
matrix-media-repo: Unsafe media served inline on download endpoints
CVE-2023-41338Medium· 5.3Fiber unauthorized access vulnerability in `ctx.IsFromLocal()`
Fiber unauthorized access vulnerability in `ctx.IsFromLocal()`
CVE-2023-41329Low· 3.9Domain restrictions bypass via DNS Rebinding in WireMock and WireMock Studio webhooks, proxy and recorder modes
Domain restrictions bypass via DNS Rebinding in WireMock and WireMock Studio webhooks, proxy and recorder modes
GHSA-6xv5-86q9-7xr8MediumSecureJoin: on windows, paths outside of the rootfs could be inadvertently produced
SecureJoin: on windows, paths outside of the rootfs could be inadvertently produced
CVE-2023-41319High· 8.8Remote Code Execution in Custom Integration Upload
Remote Code Execution in Custom Integration Upload
CVE-2023-41050Medium· 6.8Information disclosure in AccessControl
Information disclosure in AccessControl
CVE-2023-28433High· 8.8Minio vulnerable to Privilege Escalation on Windows via Path separator manipulation
Minio vulnerable to Privilege Escalation on Windows via Path separator manipulation
GHSA-23px-mw2p-46qmMediumCosmos-SDK Cosmovisor component may be vulnerable to denial of service
Cosmos-SDK Cosmovisor component may be vulnerable to denial of service
CVE-2023-27523Medium· 5.0Apache Superset vulnerable to improper data authorization
Apache Superset vulnerable to improper data authorization
CVE-2023-39265Medium· 6.5PoCApache Superset Improper Input Validation vulnerability
Apache Superset Improper Input Validation vulnerability
CVE-2023-37941Medium· 6.6PoCApache Superset Deserialization of Untrusted Data vulnerability
Apache Superset Deserialization of Untrusted Data vulnerability
CVE-2023-38201Medium· 6.5Keylime registrar and (untrusted) Agent can be bypassed by an attacker
Keylime registrar and (untrusted) Agent can be bypassed by an attacker
CVE-2023-39264Medium· 4.3Apache Superset may expose internal traces on REST API endpoints
Apache Superset may expose internal traces on REST API endpoints
CVE-2023-27526Medium· 4.3Apache Superset users may incorrectly create resources using the import charts feature
Apache Superset users may incorrectly create resources using the import charts feature
CVE-2023-36387Medium· 5.4Apache Superset has improper default REST API permission for Gamma users
Apache Superset has improper default REST API permission for Gamma users
CVE-2023-32672Medium· 4.3Apache Superset has incorrect authorization check
Apache Superset has incorrect authorization check
CVE-2023-36388Medium· 4.3Apache Superset Server Side Request Forgery vulnerability
Apache Superset Server Side Request Forgery vulnerability
CVE-2023-28434High· 8.8CISA KEVPoCPrivilege Escalation on Linux/MacOS
Privilege Escalation on Linux/MacOS
CVE-2023-41880Low· 2.2Miscompilation of wasm `i64x2.shr_s` instruction with constant input on x86\_64
Miscompilation of wasm `i64x2.shr_s` instruction with constant input on x86\_64
CVE-2023-41052Medium· 5.3incorrect order of evaluation of side effects for some builtins
incorrect order of evaluation of side effects for some builtins