An HTTP Response Smuggling vulnerability was found in the Apache HTTP Server via mod_proxy_uwsgi. This security issue occurs when special characters in the origin response header can truncate or split the response forwarded to the client.

▾ TwilightRed Hat · Red Hat Enterprise Linux AppStream EUS (v.8.6)EPSS 2.1%via CSAF

CVE-2023-22432Medium· 6.1PoC

3y ago

Open redirect in web2py

▾ Twilightweb2py · web2pyEPSS 2.4%via OSV

CVE-2023-26051Medium· 6.5

3y ago

Saleor has Staff-Authenticated Error Message Information Disclosure Vulnerability via Python Exceptions

▾ Sunlitsaleor · saleorEPSS 0.82%via OSV

CVE-2023-26483Medium· 5.3

3y ago

gosaml2 vulnerable to Denial Of Service Via Deflate Decompression Bomb

▾ Sunlitrussellhaering · github.com/russellhaering/gosaml2EPSS 0.96%via OSV

Tagged “osv”

TensorFlow vulnerable to Out-of-Bounds Read in DynamicStitch

TensorFlow has Segfault in Bincount with XLA

TensorFlow vulnerable to integer overflow in EditDistance

TensorFlow has null dereference on ParallelConcat with XLA

TensorFlow has Heap-buffer-overflow in AvgPoolGrad

TensorFlow vulnerable to Out-of-Bounds Read in GRUBlockCellGrad

TensorFlow has Null Pointer Error in TensorArrayConcatV2

TensorFlow has Floating Point Exception in TensorListSplit with XLA

TensorFlow has Floating Point Exception in TFLite in conv kernel

TensorFlow has Null Pointer Error in SparseSparseMaximum

TensorFlow has Null Pointer Error in QuantizedMatMulWithBiasAndDequantize

Grafana Stored Cross-site Scripting in Graphite FunctionDescription tooltip

Argo CD authenticated but unauthorized users may enumerate Application names via the API

tripleo-ansible may disclose important configuration details from an OpenStack deployment

tripleo-ansible may disclose important configuration details from an OpenStack deployment

crewjam/saml vulnerable to Denial Of Service Via Deflate Decompression Bomb

`cilium-cli` disables etcd authorization for clustermesh clusters

cloudflared's Installer has Local Privilege Escalation Vulnerability

Sentry SDK leaks sensitive session information when `sendDefaultPII` is set to `True`

CairoSVG improperly processes SVG files loaded from external resources

cilium-agent container can access the host via `hostPath` mount

Authelia allows open redirects on the logout endpoint

Full authentication bypass if SASL authorization username is specified

Cross-site Scripting in django-ajax-utilities

Consul Server Panic when Ingress and API Gateways Configured with Peering Connections

openstack-neutron uncontrolled resource consumption flaw

httpd: mod_proxy_uwsgi HTTP response splitting (CVE-2023-27522)

Open redirect in web2py

Saleor has Staff-Authenticated Error Message Information Disclosure Vulnerability via Python Exceptions

gosaml2 vulnerable to Denial Of Service Via Deflate Decompression Bomb