Skip to content
OpenAdvisories

Ecosystem

Wolfi

8,518 known vulnerabilities.

Most affected packages

chromium 3,268 chromium-docker-selenium-compat 1,659 chromium-lang 1,659 firefox 662 open-webui 270 langfuse-3-worker 248 katib-suggestion-hyperopt 237 katib-earlystopping 228 katib-suggestion-hyperband 222 katib-suggestion-pbt-enas 222 katib-suggestion-optuna-enas 222 katib-suggestion-skopt-enas 222 katib-suggestion-nas-darts 220 katib-suggestion-goptuna-compat 217 druid 214 katib-suggestion-nas-enas 210 katib-tfevent-metricscollector 208 renovate 199 thingsboard-tb-node 190 zot 182 kubescape 179 thingsboard-tb-mqtt-transport 178 prism 175 kots 171 zarf 164 k3d 162 openjdk-9-jre 162 opensearch-dashboards-3 158 skaffold 150 aactl 146 trivy 145 langfuse-3 145 k3s 144 kubeflow-pipelines-apiserver 143 scorecard 142 trino 142 airflow-3 141 k3s-static 141 helm-3 136 lerna 134
All Critical High Medium Low Exploited only Public exploit

8,494 results · Feed

  • Unscored —
    CVE-2008-1145 Public exploit EPSS 27%

    Directory traversal vulnerability in WEBrick in Ruby 1.8 before 1.8.5-p115 and 1.8.6-p114, and 1.9 through 1.9.0-1, whe…

    ruby3.4-webrick ruby4.0-webrick ruby3.3-webrick Wolfi
  • Unscored —
    CVE-2007-6423

    Unspecified vulnerability in mod_proxy_balancer for Apache HTTP Server 2.2.x before 2.2.7-dev, when running on Windows,…

    apache2 Wolfi
  • Unscored —
    CVE-2007-4596 Public exploit

    The perl extension in PHP does not follow safe_mode restrictions, which allows context-dependent attackers to execute a…

    php-8.4 php-8.5 Wolfi
  • Unscored —
    CVE-2007-2407

    The Samba server on Apple Mac OS X 10.3.9 and 10.4.10, when Windows file sharing is enabled, does not enforce disk quot…

    samba-server Wolfi
  • Unscored —
    CVE-2007-3205

    The parse_str function in (1) PHP, (2) Hardened-PHP, and (3) Suhosin, when called without a second parameter, might all…

    php-8.5 php-8.4 Wolfi
  • Unscored —
    CVE-2007-2728

    The soap extension in PHP calls php_rand_r with an uninitialized seed variable, which has unknown impact and attack vec…

    php-8.5 php-8.4 Wolfi
  • Medium —
    CVE-2007-0450 Public exploit EPSS 91%

    Apache Tomcat Directory Traversal

    Directory traversal vulnerability in Apache HTTP Server and Tomcat 5.x before 5.5.22 and 6.x before 6.0.10, when using certain proxy modules (mod_proxy, mod_rewrite, mod_jk), allows remote attackers to read arbitrary files via a .. (dot dot) sequence with com…

    org.apache.tomcat:tomcat apache2 Wolfi Maven
  • Unscored —
    CVE-2007-1397 Public exploit

    Multiple stack-based buffer overflows in the (1) ExtractRnick and (2) decrypt_topic_332 functions in FiSH allow remote …

    fish Wolfi
  • Unscored —
    CVE-2007-0086 EPSS 10%

    The Apache HTTP Server, when accessed through a TCP connection with a large window size, allows remote attackers to cau…

    apache2 apache2 Debian Wolfi
  • Unscored —
    CVE-1999-1412 Public exploit EPSS 36%

    A possible interaction between Apple MacOS X release 1.0 and Apache HTTP server allows remote attackers to cause a deni…

    apache2 Wolfi
  • Unscored —
    CVE-1999-1237

    Multiple buffer overflows in smbvalid/smbval SMB authentication library, as used in Apache::AuthenSmb and possibly othe…

    apache2 Wolfi
  • Unscored —
    CVE-1999-0678 Public exploit EPSS 31%

    A default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /usr/doc, which allows remote users to rea…

    apache2 Wolfi
  • Unscored —
    CVE-1999-0289

    The Apache web server for Win32 may provide access to restricted files when a . (dot) is appended to a requested URL.

    apache2 Wolfi
  • Unscored —
    CVE-1999-0236 Public exploit EPSS 26%

    ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs.

    apache2 Wolfi