Tagged “osv”
CVEs tagged osv, newest first.
7207 CVEsRSS
CVE-2022-37394Low· 3.3OpenStack Nova Changing vnic_type breaks compute service restart
OpenStack Nova Changing vnic_type breaks compute service restart
CVE-2022-35922NoneUnbounded memory allocation based on untrusted length
Unbounded memory allocation based on untrusted length
GO-2022-0379NoneType confusion in github.com/docker/distribution
Type confusion in github.com/docker/distribution
CVE-2022-31173High· 7.5Denial of service on deeply nested fragment requests
Denial of service on deeply nested fragment requests
CVE-2022-34558Critical· 9.8WMAgent v1.3.3rc2 and 1.3.3rc1, reqmgr 2 1.4.1rc5 and 1.4.0rc2, reqmon 1.4.1rc5, and global-workqueue 1.4.1rc5 allows attackers to execut…
WMAgent v1.3.3rc2 and 1.3.3rc1, reqmgr 2 1.4.1rc5 and 1.4.0rc2, reqmon 1.4.1rc5, and global-workqueue 1.4.1rc5 allows attackers to execute arbitrary code via a crafted dbs-client package.
CVE-2022-2514Medium· 6.1Fava time and filter parameters vulnerable to reflected Cross-site Scripting
Fava time and filter parameters vulnerable to reflected Cross-site Scripting
CVE-2022-24294High· 7.5Apache MXNet vulnerable to potential denial-of-service by excessive resource consumption
Apache MXNet vulnerable to potential denial-of-service by excessive resource consumption
CVE-2018-25045Medium· 6.1Django REST framework XSS Vulnerability
Django REST framework XSS Vulnerability
CVE-2022-25891High· 7.5Shoutrrr util package DoS via sending 2000, 4000, or 6000 character messages
Shoutrrr util package DoS via sending 2000, 4000, or 6000 character messages
CVE-2021-42343Critical· 9.8Workers for local Dask clusters mistakenly listened on public interfaces
Workers for local Dask clusters mistakenly listened on public interfaces
CVE-2022-31153Medium· 6.5OpenZeppelin Contracts for Cairo account cannot process transactions on Goerli
OpenZeppelin Contracts for Cairo account cannot process transactions on Goerli
CVE-2022-30187Medium· 4.7Microsoft: CBC Padding Oracle in Azure Blob Storage Encryption Library
Microsoft: CBC Padding Oracle in Azure Blob Storage Encryption Library
CVE-2022-31573Critical· 9.3ChainerRL Visualizer 0.1.1 vulnerable to Path Traversal via unsafe use of send_file function
ChainerRL Visualizer 0.1.1 vulnerable to Path Traversal via unsafe use of send_file function
CVE-2022-31146NoneUse After Free with `externref`s in Wasmtime
Use After Free with `externref`s in Wasmtime
CVE-2022-23486High· 7.5libp2p Lack of resource management DoS
libp2p Lack of resource management DoS
CVE-2021-37839Medium· 4.3Apache Superset allows authenticated users to access metadata they have no permission to
Apache Superset allows authenticated users to access metadata they have no permission to
CVE-2022-31836Critical· 9.8Path Traversal in Beego
Path Traversal in Beego
CVE-2022-23636NonePoCMiscompilation of constant values in division on AArch64
Miscompilation of constant values in division on AArch64
CVE-2022-31116High· 7.5Incorrect handling of invalid surrogate pair characters
Incorrect handling of invalid surrogate pair characters
CVE-2022-31117Medium· 5.9Potential double free of buffer during string decoding
Potential double free of buffer during string decoding
CVE-2022-33082High· 7.5PoCDenial of service in Open Policy Agent
Denial of service in Open Policy Agent
CVE-2022-33146Medium· 6.1Open redirect in web2py
Open redirect in web2py
CVE-2022-31104NoneMiscompilation of `i8x16.swizzle` and `select` with v128 inputs
Miscompilation of `i8x16.swizzle` and `select` with v128 inputs
CVE-2022-31604Critical· 9.8Unsafe deserialisation in the PKI implementation scheme of NVFlare
Unsafe deserialisation in the PKI implementation scheme of NVFlare
CVE-2022-31605Critical· 9.8Unsafe yaml deserialization in NVFlare
Unsafe yaml deserialization in NVFlare
CVE-2021-46823Medium· 6.5Denial of Service in python-ldap
Denial of Service in python-ldap
CVE-2022-2112High· 8.8CSV Injection in inventree
CSV Injection in inventree
CVE-2021-45707HighOut-of-bounds write in nix::unistd::getgrouplist
Out-of-bounds write in nix::unistd::getgrouplist
CVE-2022-25856High· 7.5Insecure path traversal in Git Trigger Source can lead to arbitrary file read
Insecure path traversal in Git Trigger Source can lead to arbitrary file read
CVE-2022-2111High· 8.8Unrestricted Attachment Upload
Unrestricted Attachment Upload