Top technology
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Bazarr
HIGH 8.2
CVE-2024-40348EPSS 8%
An issue in the component /api/swaggerui/static of Bazaar v1.4.3 allows unauthenticated attackers to execute a directory traversal.
Fix: after 1.4.3
Fix from $1,950
2024-07-20
Bazarr
MEDIUM 5.3
CVE-2023-50266
Bazarr manages and downloads subtitles. In version 1.2.4, the proxy method in bazarr/bazarr/app/ui.py does not validate the user-controlled protocol …
Patch available
Fix from $1,600
2023-12-15
Bazarr
HIGH 7.5
CVE-2023-50264
Bazarr manages and downloads subtitles. Prior to 1.3.1, Bazarr contains an arbitrary file read in /system/backup/download/ endpoint in bazarr/app/ui.…
Fix: 1.3.1+
Fix from $1,950
2023-12-15
Bazarr
HIGH 7.5
CVE-2023-50265
Bazarr manages and downloads subtitles. Prior to 1.3.1, the /api/swaggerui/static endpoint in bazarr/app/ui.py does not validate the user-controlled …
Fix: 1.3.1+
Fix from $1,950
2023-12-15