Tagged “osv”

CVEs tagged osv, newest first.

7207 CVEsRSS

CVE-2020-26242Medium· 6.5

5y ago

An issue was discovered in urllib3 before 1.26.5. When provided with a URL containing many @ characters in the authority component, the a…

An issue was discovered in urllib3 before 1.26.5. When provided with a URL containing many @ characters in the authority component, the authority regular expression exhibits catastrophic backtracking, causing a denial of service if a URL…

▾ Twilighturllib3 · urllib3EPSS 3.3%via OSV

GHSA-vfvf-6gx5-mqv6High· 7.5

5y ago

Incorrect Authorization in ORY Oathkeeper

▾ Twilightory · github.com/ory/oathkeepervia OSV

CVE-2020-27846Critical· 9.8

5y ago

XML Processing error in github.com/crewjam/saml

▾ Midnightcrewjam · github.com/crewjam/samlEPSS 4.9%via OSV

CVE-2020-26279High· 7.7

5y ago

Path traversal in github.com/ipfs/go-ipfs

▾ Twilightipfs · github.com/ipfs/go-ipfsEPSS 1.7%via OSV

GHSA-qvp4-rpmr-xwrrHigh· 7.5

5y ago

Possible bypass of token claim validation when OAuth2 Introspection caching is enabled

▾ Twilightory · github.com/ory/oathkeepervia OSV

CVE-2020-4053Low· 3.7

5y ago

Plugin archive directory traversal in Helm

▾ Sunlithelm · helm.sh/helm/v3EPSS 1.5%via OSV

CVE-2021-32699Medium· 6.5

5y ago

Asymmetric Resource Consumption (Amplification) in Docker containers created by Wings

▾ Sunlitpterodactyl · github.com/pterodactyl/wingsEPSS 0.27%via OSV

CVE-2021-21303Medium· 6.5

5y ago

Improper Neutralization of Special Elements in Output in helm.sh/helm/v3

▾ Sunlithelm · helm.sh/helm/v3EPSS 1.1%via OSV

CVE-2020-7667High· 7.5

5y ago

github.com/sassoftware/go-rpmutils Arbitrary File Write via Archive Extraction (Zip Slip)

▾ Twilightsassoftware · github.com/sassoftware/go-rpmutilsEPSS 1.6%via OSV

CVE-2020-26284High· 7.7

5y ago

Hugo can execute a binary from the current directory on Windows

▾ Twilightgohugoio · github.com/gohugoio/hugoEPSS 1.5%via OSV

CVE-2021-23365Critical· 9.1

5y ago

Authentication Bypass in tyk-identity-broker

▾ Midnighttyktechnologies · github.com/tyktechnologies/tyk-identity-brokerEPSS 1.0%via OSV

CVE-2021-32690Medium

5y ago

Helm passes repository credentials to alternate domain

▾ Sunlithelm · helm.sh/helm/v3EPSS 1.4%via OSV

CVE-2020-7655Medium· 6.1

5y ago

HTTP Request Smuggling in netius

▾ Sunlitnetius · netiusEPSS 0.84%via OSV

CVE-2021-33507Medium· 6.1

5y ago

Cross-site scripting in Products.CMFCore, Products.PluggableAuthService, Plone

▾ Sunlitproducts-cmfcore · products-cmfcoreEPSS 0.75%via OSV

CVE-2020-13258Medium· 6.1PoC

5y ago

Cross-site scripting in Contentful

▾ Twilightcontentful · contentfulEPSS 2.1%via OSV

CVE-2021-32633Medium· 6.8

5y ago

Remote Code Execution via traversal in TAL expressions

▾ Sunlitzope · zopeEPSS 1.9%via OSV

CVE-2021-32681Medium· 5.4

5y ago

Cross-site Scripting in wagtail

▾ Sunlitwagtail · wagtailEPSS 1.1%via OSV

RUSTSEC-2021-0156None

5y ago

Triton VM Soundness Vulnerability due to Missing Constraint

▾ Sunlittriton-vm · triton-vmvia OSV

CVE-2021-32677High· 8.2

5y ago

Cross-Site Request Forgery (CSRF) in FastAPI

▾ Twilightfastapi · fastapiEPSS 0.72%via OSV

CVE-2021-32674High· 8.8

5y ago

Remote Code Execution via traversal in TAL expressions

▾ Twilightzope · zopeEPSS 1.6%via OSV

CVE-2017-8761Low

5y ago

Temporary urls leaked via logging

▾ Sunlitswift · swiftEPSS 0.82%via OSV

CVE-2021-32670High· 7.2

5y ago

Reflected cross-site scripting issue in Datasette

▾ Twilightdatasette · datasetteEPSS 0.96%via OSV

CVE-2021-32923Medium· 6.5

5y ago

vault: Token leases incorrectly treated as non-expiring (CVE-2021-32923)

A flaw was found in the HashiCorp Vault and Vault Enterprise. The vault could allow a remote attacker to bypass security restrictions caused by a renewal logic flaw when a token lease or dynamic secret lease was renewed inside the last sec…

▾ SunlitRed Hat · Red Hat Openshift Container Storage 4EPSS 1.4%via CSAF

CVE-2021-32635Medium· 6.3

5y ago