Tagged “osv”
CVEs tagged osv, newest first.
7207 CVEsRSS
CVE-2022-2582Medium· 4.3AWS S3 Crypto SDK sends an unencrypted hash of the plaintext alongside the ciphertext as a metadata field
AWS S3 Crypto SDK sends an unencrypted hash of the plaintext alongside the ciphertext as a metadata field
CVE-2019-25091Medium· 5.3nsupdate.info has Sensitive Cookie Without 'HttpOnly' Flag
nsupdate.info has Sensitive Cookie Without 'HttpOnly' Flag
CVE-2022-4729Medium· 5.4Graphite Web Cross-site Scripting vulnerability
Graphite Web Cross-site Scripting vulnerability
CVE-2022-4730Medium· 5.4Graphite Web Cross-site Scripting vulnerability
Graphite Web Cross-site Scripting vulnerability
CVE-2021-4287Medium· 6.5binwalk vulnerable to UNIX Symbolic Link (Symlink) Following
binwalk vulnerable to UNIX Symbolic Link (Symlink) Following
CVE-2022-4728Medium· 5.4Graphite Web Cross-site Scripting vulnerability
Graphite Web Cross-site Scripting vulnerability
CVE-2022-40897High· 7.5pypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS)
pypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS)
CVE-2022-47633High· 8.1kyverno verifyImages rule bypass possible with malicious proxy/registry
kyverno verifyImages rule bypass possible with malicious proxy/registry
CVE-2022-38060High· 7.8OpenStack Kolla sudo privilege escalation vulnerability
OpenStack Kolla sudo privilege escalation vulnerability
CVE-2022-46421Critical· 9.8Apache Airflow Hive Provider vulnerable to Command Injection
Apache Airflow Hive Provider vulnerable to Command Injection
CVE-2022-44940Critical· 9.1Patchelf out-of-bounds read
Patchelf out-of-bounds read
CVE-2022-4589Medium· 6.1Terms and Conditions Module vulnerable to Open Redirect
Terms and Conditions Module vulnerable to Open Redirect
CVE-2022-23524High· 7.5⚖ disputedhelm: Denial of service through string value parsing (CVE-2022-23524)
A flaw was found in Helm, a tool for managing Charts, a pre-configured Kubernetes resources. Versions prior to 3.10.3 are subject to Uncontrolled Resource Consumption. Input to functions in the _strvals_ package could cause a stack overflo…
CVE-2022-23526High· 7.5⚖ disputedhelm: Denial of service through schema file (CVE-2022-23526)
A flaw was found in Helm, a tool for managing Charts, a pre-configured Kubernetes resources. Versions prior to 3.10.3 are subject to NULL Pointer Dereference in the_chartutil_ package that could cause a segmentation violation. The _chartut…
CVE-2022-23525High· 7.5⚖ disputedhelm: Denial of service through through repository index file (CVE-2022-23525)
A flaw was found in Helm. Applications that use the _repo_ package in Helm SDK to parse an index file may suffer a denial of service when that input causes a panic that cannot be recovered from. The Helm Client will panic with an index fil…
CVE-2022-4223High· 8.8PoCpgadmin4 vulnerable to Code Injection
pgadmin4 vulnerable to Code Injection
CVE-2022-4396Medium· 5.4pyRdfa3 Cross-site Scripting vulnerability
pyRdfa3 Cross-site Scripting vulnerability
CVE-2022-23469Low· 3.5Traefik may display authorization header in the debug logs
Traefik may display authorization header in the debug logs
CVE-2022-46153Medium· 6.5Traefik routes exposed with an empty TLSOption
Traefik routes exposed with an empty TLSOption
CVE-2022-23471Medium· 5.7containerd CRI stream server vulnerable to host memory exhaustion via terminal
containerd CRI stream server vulnerable to host memory exhaustion via terminal
CVE-2022-46742Critical· 9.8PaddlePaddle vulnerable to Code Injection
PaddlePaddle vulnerable to Code Injection
CVE-2022-46741Critical· 9.1PaddlePaddle Out-of-bounds Read vulnerability
PaddlePaddle Out-of-bounds Read vulnerability
CVE-2022-46146High· 7.5exporter-toolkit: authentication bypass via cache poisoning (CVE-2022-46146)
A flaw was found in exporter-toolkit. A request can be forged by an attacker to poison the internal cache used to cache hashes and make subsequent successful requests. This cache is used to limit side channel attacks that could tell an att…
CVE-2022-45908Critical· 9.8PaddlePaddle vulnerable to code injection via winstr
PaddlePaddle vulnerable to code injection via winstr
CVE-2022-40189Critical· 9.8OS Command Injection in Apache Airflow
OS Command Injection in Apache Airflow
CVE-2022-38649Critical· 9.8OS Command Injection in Apache Airflow
OS Command Injection in Apache Airflow
CVE-2022-41131High· 7.8OS Command Injection in Apache Airflow
OS Command Injection in Apache Airflow
CVE-2022-41880Medium· 6.8Tensorflow vulnerable to Out-of-Bounds Read
Tensorflow vulnerable to Out-of-Bounds Read
CVE-2022-40954Medium· 5.5OS Command Injection in Apache Airflow
OS Command Injection in Apache Airflow
CVE-2022-41889Medium· 5.5Segfault via invalid attributes in `pywrap_tfe_src.cc`
Segfault via invalid attributes in `pywrap_tfe_src.cc`