Tagged “osv”
CVEs tagged osv, newest first.
7207 CVEsRSS
CVE-2021-21394Medium· 5.3Denial of service (via resource exhaustion) due to improper input validation on third-party identifier endpoints
Denial of service (via resource exhaustion) due to improper input validation on third-party identifier endpoints
CVE-2021-21393Medium· 5.3Denial of service (via resource exhaustion) due to improper input validation on groups/communities endpoints
Denial of service (via resource exhaustion) due to improper input validation on groups/communities endpoints
CVE-2021-21392Medium· 6.3Open redirect via transitional IPv6 addresses on dual-stack networks
Open redirect via transitional IPv6 addresses on dual-stack networks
CVE-2021-21431High· 7.6Improper Input Validation in sopel-plugins.channelmgnt
Improper Input Validation in sopel-plugins.channelmgnt
CVE-2020-28735High· 8.8SSRF attacks via tracebacks in Plone
SSRF attacks via tracebacks in Plone
CVE-2020-28734High· 8.8Improper Restriction of XML External Entity Reference in Plone
Improper Restriction of XML External Entity Reference in Plone
CVE-2020-28736High· 8.8Improper Restriction of XML External Entity Reference in Plone
Improper Restriction of XML External Entity Reference in Plone
CVE-2021-21423Medium· 6.8PoCRebuild-bot workflow may allow unauthorised repository modifications
Rebuild-bot workflow may allow unauthorised repository modifications
CVE-2021-21416Low· 3.7Potential sensitive information disclosed in error reports
Potential sensitive information disclosed in error reports
CVE-2021-21333Medium· 6.1HTML injection in email and account expiry notifications
HTML injection in email and account expiry notifications
CVE-2021-21332Medium· 6.9Cross-site scripting (XSS) vulnerability in the password reset endpoint
Cross-site scripting (XSS) vulnerability in the password reset endpoint
CVE-2021-21376Medium· 6.4OMERO.web exposes some unnecessary session information in the page
OMERO.web exposes some unnecessary session information in the page
CVE-2021-21377Medium· 4.8OMERO webclient does not validate URL redirects on login or switching group.
OMERO webclient does not validate URL redirects on login or switching group.
CVE-2021-28363Medium· 6.5The urllib3 library 1.26.x before 1.26.4 for Python omits SSL certificate validation in some cases involving HTTPS to HTTPS proxies
The urllib3 library 1.26.x before 1.26.4 for Python omits SSL certificate validation in some cases involving HTTPS to HTTPS proxies. The initial connection to the HTTPS proxy (if an SSLContext isn't given via proxy_config) doesn't verify…
CVE-2021-21371Medium· 5.0Execution of untrusted code through config file
Execution of untrusted code through config file
CVE-2021-21360Medium· 5.3Exposure of Sensitive Information to an Unauthorized Actor in Products.GenericSetup
Exposure of Sensitive Information to an Unauthorized Actor in Products.GenericSetup
CVE-2021-21336Medium· 6.5Exposure of Sensitive Information to an Unauthorized Actor in Products.PluggableAuthService ZODBRoleManager
Exposure of Sensitive Information to an Unauthorized Actor in Products.PluggableAuthService ZODBRoleManager
CVE-2021-21337Medium· 5.7PoCURL Redirection to Untrusted Site ('Open Redirect') in Products.PluggableAuthService
URL Redirection to Untrusted Site ('Open Redirect') in Products.PluggableAuthService
CVE-2021-21274Medium· 4.3Denial of service attack via .well-known lookups
Denial of service attack via .well-known lookups
CVE-2021-21273Low· 3.1Open redirects on some federation and push requests
Open redirects on some federation and push requests
CVE-2021-21330Low· 3.1`aiohttp` Open Redirect vulnerability (`normalize_path_middleware` middleware)
`aiohttp` Open Redirect vulnerability (`normalize_path_middleware` middleware)
CVE-2021-21240High· 7.5Regular Expression Denial of Service (REDoS) in httplib2
Regular Expression Denial of Service (REDoS) in httplib2
CVE-2021-21299High· 8.1Multiple Transfer-Encoding headers misinterprets request payload
Multiple Transfer-Encoding headers misinterprets request payload
CVE-2021-23980Medium· 6.1Cross-site scripting in Bleach
Cross-site scripting in Bleach
CVE-2021-21238Medium· 6.5SAML XML Signature wrapping in PySAML2
SAML XML Signature wrapping in PySAML2
CVE-2021-21239Medium· 6.5PoCImproper Verification of Cryptographic Signature in PySAML2
Improper Verification of Cryptographic Signature in PySAML2
CVE-2021-25900Critical· 9.8Buffer overflow in SmallVec::insert_many
Buffer overflow in SmallVec::insert_many
CVE-2021-21236High· 7.5Regular Expression Denial of Service in CairoSVG
Regular Expression Denial of Service in CairoSVG
CVE-2020-27534Medium· 5.3moby/buildkit: calls os.OpenFile with a potentially unsafe qemu-check temporary pathname (CVE-2020-27534)
A flaw was found in moby. Moby buildkit calls os.OpenFile with a potentially unsafe qemu-check temporary pathname, constructed with an empty first argument in an ioutil.TempDir call.
CVE-2020-26263High· 7.5RSA weakness in tslite-ng
RSA weakness in tslite-ng