Tagged “osv”
CVEs tagged osv, newest first.
5712 CVEsRSS
CVE-2022-25856High· 7.5Insecure path traversal in Git Trigger Source can lead to arbitrary file read
Insecure path traversal in Git Trigger Source can lead to arbitrary file read
CVE-2022-2111High· 8.8Unrestricted Attachment Upload
Unrestricted Attachment Upload
CVE-2022-29241High· 7.1Jupyter server Token bruteforcing
Jupyter server Token bruteforcing
CVE-2022-31313Critical· 9.8api-res-py package in PyPI 0.1 is vulnerable to a code execution backdoor in the request package.
api-res-py package in PyPI 0.1 is vulnerable to a code execution backdoor in the request package.
CVE-2022-28224Medium· 5.5Calico vulnerable to pod route hijacking
Calico vulnerable to pod route hijacking
CVE-2022-31030Medium· 5.5containerd CRI plugin: Host memory exhaustion through ExecSync
containerd CRI plugin: Host memory exhaustion through ExecSync
CVE-2022-1708High· 7.5Node DOS by way of memory exhaustion through ExecSync request in CRI-O
Node DOS by way of memory exhaustion through ExecSync request in CRI-O
CVE-2022-29773Medium· 6.5Access control issue in AlekSIS-Core
Access control issue in AlekSIS-Core
CVE-2022-29718Medium· 6.1Open redirect in caddy
Open redirect in caddy
CVE-2021-32546CriticalOS Command Injection in gogs
OS Command Injection in gogs
CVE-2020-13430Medium· 6.1Grafana XSS via the OpenTSDB datasource
Grafana XSS via the OpenTSDB datasource
CVE-2022-29178High· 8.8Access to Unix domain socket can lead to privileges escalation in Cilium
Access to Unix domain socket can lead to privileges escalation in Cilium
CVE-2020-29652High· 7.5golang.org/x/crypto/ssh NULL Pointer Dereference vulnerability
golang.org/x/crypto/ssh NULL Pointer Dereference vulnerability
CVE-2020-12458Medium· 5.5Grafana information disclosure
Grafana information disclosure
CVE-2020-8567Medium· 4.9Kubernetes Secrets Store CSI Driver plugins arbitrary file write
Kubernetes Secrets Store CSI Driver plugins arbitrary file write
CVE-2019-9901Critical· 10.0EnvoyProxy Envoy Missing HTTP URL path normalization
EnvoyProxy Envoy Missing HTTP URL path normalization
CVE-2020-36846Medium· 6.5Integer overflow in the bundled Brotli C library
Integer overflow in the bundled Brotli C library
CVE-2018-1002104Medium· 5.3Kubernetes ingress exposes sensitive information
Kubernetes ingress exposes sensitive information
CVE-2020-8553Medium· 5.9ingress-nginx component for Kubernetes allows file overwrite
ingress-nginx component for Kubernetes allows file overwrite
CVE-2019-11842High· 7.5matrix-sydent and matrix-synapse Use Cryptographically Weak PRNG
matrix-sydent and matrix-synapse Use Cryptographically Weak PRNG
CVE-2020-7938High· 8.8Plone Privilege Escallation
Plone Privilege Escallation
CVE-2019-12274High· 8.8Rancher Privilege Escalation Vulnerability
Rancher Privilege Escalation Vulnerability
CVE-2021-25313Medium· 6.1Rancher Cross-site Scripting Vulnerability
Rancher Cross-site Scripting Vulnerability
CVE-2022-29211Medium· 5.5Segfault if `tf.histogram_fixed_width` is called with NaN values in TensorFlow
Segfault if `tf.histogram_fixed_width` is called with NaN values in TensorFlow
CVE-2020-15703Medium· 4.0aptdaemon Information Disclosure via Improper Input Validation in Transaction class
aptdaemon Information Disclosure via Improper Input Validation in Transaction class
CVE-2020-10755Medium· 6.5Openstack cinder Improper handling of ScaleIO backend credentials
Openstack cinder Improper handling of ScaleIO backend credentials
CVE-2022-29206Medium· 5.5Missing validation results in undefined behavior in `SparseTensorDenseAdd
Missing validation results in undefined behavior in `SparseTensorDenseAdd
CVE-2019-11340Medium· 5.9Matrix Sydent mishandles emails
Matrix Sydent mishandles emails
CVE-2019-13628Medium· 4.7wolfCrypt leaks cryptographic information via timing side channel
wolfCrypt leaks cryptographic information via timing side channel
CVE-2022-29201Medium· 5.5Missing validation results in undefined behavior in `QuantizedConv2D`
Missing validation results in undefined behavior in `QuantizedConv2D`