Tagged “osv”
CVEs tagged osv, newest first.
7203 CVEsRSS
CVE-2022-39307Medium· 5.3grafana: User enumeration via forget password (CVE-2022-39307)
An information leak was discovered in Grafana. Remote unauthenticated users could exploit the forget password feature to discover which user accounts exist.
CVE-2022-39306High· 8.1grafana: email addresses and usernames cannot be trusted (CVE-2022-39306)
An authentication bypass flaw was discovered in Grafana. This issue could allow a remote unauthenticated attacker to create an account and provide access to a certain organization, which can be exploited by gaining access to the signup lin…
CVE-2022-39394Low· 3.8Out of bounds write in `wasmtime_trap_code` C API function
Out of bounds write in `wasmtime_trap_code` C API function
CVE-2022-39392Medium· 5.9Out of bounds read/write with zero-memory-pages configuration
Out of bounds read/write with zero-memory-pages configuration
CVE-2022-3023Critical· 9.8TiDB vulnerable to Use of Externally-Controlled Format String
TiDB vulnerable to Use of Externally-Controlled Format String
CVE-2022-33684High· 8.1Apache Pulsar Disabled Certificate Validation for OAuth Client Credential Requests makes C++/Python Clients vulnerable to MITM attack
Apache Pulsar Disabled Certificate Validation for OAuth Client Credential Requests makes C++/Python Clients vulnerable to MITM attack
CVE-2022-39366Critical· 9.9acryl-datahub missing JWT signature check
acryl-datahub missing JWT signature check
CVE-2022-3616Medium· 5.4OctoRPKI crashes when max iterations is reached
OctoRPKI crashes when max iterations is reached
CVE-2022-39294High· 7.5Denial of Service from unchecked request length
Denial of Service from unchecked request length
CVE-2022-44020Medium· 5.5OpenStack Sushy-Tools and VirtualBMC Improper Preservation of Permissions
OpenStack Sushy-Tools and VirtualBMC Improper Preservation of Permissions
CVE-2022-3697High· 7.5Ansible leaks password to logs
Ansible leaks password to logs
CVE-2022-39348Medium· 5.4Twisted vulnerable to NameVirtualHost Host header injection
Twisted vulnerable to NameVirtualHost Host header injection
CVE-2022-3644Medium· 5.5Plaintext storage of tokens in pulp_ansible
Plaintext storage of tokens in pulp_ansible
CVE-2022-37454Critical· 9.8PoCThe Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties
The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge…
CVE-2022-31683Medium· 5.4Team scope authorization bypass when Post/Put request with :team_name in body, allows HTTP parameter pollution
Team scope authorization bypass when Post/Put request with :team_name in body, allows HTTP parameter pollution
CVE-2022-41547High· 7.5MobSF allows attackers to read arbitrary files via a crafted HTTP request
MobSF allows attackers to read arbitrary files via a crafted HTTP request
CVE-2022-32149High· 7.5golang.org/x/text/language Denial of service via crafted Accept-Language header
golang.org/x/text/language Denial of service via crafted Accept-Language header
CVE-2022-42906High· 7.8Powerline Gitstatus vulnerable to arbitrary code execution
Powerline Gitstatus vulnerable to arbitrary code execution
CVE-2020-26269Critical· 9.1TensorFlow vulnerable to heap out of bounds read in filesystem glob matching
TensorFlow vulnerable to heap out of bounds read in filesystem glob matching
CVE-2021-21271Medium· 6.5Tendermint Core vulnerable to Uncontrolled Resource Consumption
Tendermint Core vulnerable to Uncontrolled Resource Consumption
CVE-2020-7711High· 7.5goxmldsig vulnerable to crash on nil-pointer dereference caused by sending malformed XML signatures
goxmldsig vulnerable to crash on nil-pointer dereference caused by sending malformed XML signatures
CVE-2021-23385Medium· 6.1Flask-Security vulnerable to Open Redirect
Flask-Security vulnerable to Open Redirect
CVE-2020-15115Medium· 5.8etcd has no minimum password length
etcd has no minimum password length
CVE-2022-41715NoneMemory exhaustion when compiling regular expressions in regexp/syntax
Memory exhaustion when compiling regular expressions in regexp/syntax
CVE-2022-2880NoneIncorrect sanitization of forwarded query parameters in net/http/httputil
Incorrect sanitization of forwarded query parameters in net/http/httputil
CVE-2022-2879NoneUnbounded memory consumption when reading headers in archive/tar
Unbounded memory consumption when reading headers in archive/tar
CVE-2021-21235Medium· 6.5kamadak-exif vulnerable to Infinite loop when parsing PNG files
kamadak-exif vulnerable to Infinite loop when parsing PNG files
CVE-2020-15106Medium· 5.3etcd's WAL `ReadAll` method vulnerable to an entry with large index causing panic
etcd's WAL `ReadAll` method vulnerable to an entry with large index causing panic
CVE-2022-2529High· 7.5Cloudflare GoFlow vulnerable to a Denial of Service in the sflow packet handling package
Cloudflare GoFlow vulnerable to a Denial of Service in the sflow packet handling package
CVE-2022-39254High· 8.6When matrix-nio receives forwarded room keys, the receiver doesn't check if it requested the key from the forwarder
When matrix-nio receives forwarded room keys, the receiver doesn't check if it requested the key from the forwarder