Tagged “osv”
CVEs tagged osv, newest first.
5752 CVEsRSS
CVE-2021-32699Medium· 6.5Asymmetric Resource Consumption (Amplification) in Docker containers created by Wings
Asymmetric Resource Consumption (Amplification) in Docker containers created by Wings
CVE-2021-21303Medium· 6.5Improper Neutralization of Special Elements in Output in helm.sh/helm/v3
Improper Neutralization of Special Elements in Output in helm.sh/helm/v3
CVE-2020-7667High· 7.5github.com/sassoftware/go-rpmutils Arbitrary File Write via Archive Extraction (Zip Slip)
github.com/sassoftware/go-rpmutils Arbitrary File Write via Archive Extraction (Zip Slip)
CVE-2020-26284High· 7.7Hugo can execute a binary from the current directory on Windows
Hugo can execute a binary from the current directory on Windows
CVE-2021-23365Critical· 9.1Authentication Bypass in tyk-identity-broker
Authentication Bypass in tyk-identity-broker
CVE-2021-32690MediumHelm passes repository credentials to alternate domain
Helm passes repository credentials to alternate domain
CVE-2020-7655Medium· 6.1HTTP Request Smuggling in netius
HTTP Request Smuggling in netius
CVE-2021-33507Medium· 6.1Cross-site scripting in Products.CMFCore, Products.PluggableAuthService, Plone
Cross-site scripting in Products.CMFCore, Products.PluggableAuthService, Plone
CVE-2020-13258Medium· 6.1PoCCross-site scripting in Contentful
Cross-site scripting in Contentful
CVE-2021-32633Medium· 6.8Remote Code Execution via traversal in TAL expressions
Remote Code Execution via traversal in TAL expressions
CVE-2021-32681Medium· 5.4Cross-site Scripting in wagtail
Cross-site Scripting in wagtail
RUSTSEC-2021-0156NoneTriton VM Soundness Vulnerability due to Missing Constraint
Triton VM Soundness Vulnerability due to Missing Constraint
CVE-2021-32677High· 8.2Cross-Site Request Forgery (CSRF) in FastAPI
Cross-Site Request Forgery (CSRF) in FastAPI
CVE-2021-32674High· 8.8Remote Code Execution via traversal in TAL expressions
Remote Code Execution via traversal in TAL expressions
CVE-2017-8761LowTemporary urls leaked via logging
Temporary urls leaked via logging
CVE-2021-32670High· 7.2Reflected cross-site scripting issue in Datasette
Reflected cross-site scripting issue in Datasette
CVE-2021-32923Medium· 6.5vault: Token leases incorrectly treated as non-expiring (CVE-2021-32923)
A flaw was found in the HashiCorp Vault and Vault Enterprise. The vault could allow a remote attacker to bypass security restrictions caused by a renewal logic flaw when a token lease or dynamic secret lease was renewed inside the last sec…
CVE-2021-32635Medium· 6.3Action Commands (run/shell/exec) Against Library URIs Ignore Configured Remote Endpoint
Action Commands (run/shell/exec) Against Library URIs Ignore Configured Remote Endpoint
CVE-2021-33503High· 7.5Catastrophic backtracking in URL authority parser when passed URL containing many @ characters
Catastrophic backtracking in URL authority parser when passed URL containing many @ characters
CVE-2020-5303Low· 3.1Denial of service in Tendermint
Denial of service in Tendermint
CVE-2020-11091Medium· 5.8Weave Net clusters susceptible to MitM attacks via IPv6 rogue router advertisements
Weave Net clusters susceptible to MitM attacks via IPv6 rogue router advertisements
CVE-2020-5300Medium· 5.8Authentication Bypass in hydra
Authentication Bypass in hydra
CVE-2021-29621Medium· 5.3Observable Response Discrepancy in Flask-AppBuilder
Observable Response Discrepancy in Flask-AppBuilder
CVE-2021-21291Medium· 5.4Subdomain checking of whitelisted domains could allow unintended redirects in oauth2-proxy
Subdomain checking of whitelisted domains could allow unintended redirects in oauth2-proxy
CVE-2021-28955Critical· 9.8Arbitrary code execution due to an uncontrolled search path for the git binary
Arbitrary code execution due to an uncontrolled search path for the git binary
CVE-2021-30465High· 7.6mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs
mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs
CVE-2021-28681Medium· 5.3In github.com/pion/webrtc, failed DTLS certificate verification doesn't stop data channel communication
In github.com/pion/webrtc, failed DTLS certificate verification doesn't stop data channel communication
CVE-2021-29482High· 7.5github.com/ulikunitz/xz fixes readUvarint Denial of Service (DoS)
github.com/ulikunitz/xz fixes readUvarint Denial of Service (DoS)
CVE-2020-15229High· 8.2Path traversal and files overwrite with unsquashfs in singularity
Path traversal and files overwrite with unsquashfs in singularity
CVE-2020-15223High· 8.0Ory fosite contains Improper Handling of Exceptional Conditions
Ory fosite contains Improper Handling of Exceptional Conditions