Kritisch
CVE-2012-3442
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 1.319
Filter zurücksetzen
Mittel
CVE-2014-3995
Cross-site scripting (XSS) vulnerability in gravatars/templatetags/gravatars.py in Djblets before 0.7.30 and 0.8.x before 0.8.3 for Django allows remote attackers to inject arbitrary web script or HTM
Kritisch
CVE-2014-9706
The build_index_from_tree function in index.py in Dulwich before 0.9.9 allows remote attackers to execute arbitrary code via a commit with a directory path starting with .git/, which is not properly h
Mittel
CVE-2016-6580
A HTTP/2 implementation built using any version of the Python priority library prior to version 1.2.0 could be targeted by a malicious peer by having that peer assign priority information for every po
Hoch
CVE-2011-4138
The verify_exists functionality in the URLField implementation in Django before 1.2.7 and 1.3.x before 1.3.1 originally tests a URL's validity through a HEAD request, but then uses a GET request for t
Hoch
CVE-2013-4200
The isURLInPortal method in the URLTool class in in_portal.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 treats URLs starting with a space as a relative URL, which allows r
Hoch
CVE-2015-7529
sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an archive file in a temporary directory, as demonstrated by sos
Hoch
CVE-2018-13346
The mpatch_apply function in mpatch.c in Mercurial before 4.6.1 incorrectly proceeds in cases where the fragment start is past the end of the original data, aka OVE-20180430-0004.
Hoch
CVE-2022-22941
An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. When configured as a Master-of-Masters, with a publisher_acl, if a user configured in the publisher_acl targets any
Kritisch
CVE-2022-24766
Insufficient Protection against HTTP Request Smuggling in mitmproxy
Hoch
CVE-2022-24761
HTTP Request Smuggling in waitress
Mittel
CVE-2022-0577
Incorrect Authorization and Exposure of Sensitive Information to an Unauthorized Actor in scrapy
Mittel
ghsa-mfjm-vh54-3f96
Scrapy cookie-setting is not restricted based on the public suffix list
Kritisch
CVE-2020-9480
In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to require authentication (spark.authenticate) via a shared secret. When enabled, however, a specially-craft
Hoch
CVE-2022-23558
Integer overflow in TFLite array creation
Hoch
CVE-2022-21728
Out of bounds read in Tensorflow
Hoch
CVE-2022-21699
Execution with Unnecessary Privileges in ipython
Hoch
CVE-2022-21668
Pipenv's requirements.txt parsing allows malicious index url in comments
Nicht bewertet
CVE-2021-44078
An issue was discovered in split_region in uc.c in Unicorn Engine before 2.0.0-rc5. It allows local attackers to escape the sandbox. An attacker must first obtain the ability to execute crafted code i
Hoch
CVE-2021-43854
Inefficient Regular Expression Complexity in nltk (word_tokenize, sent_tokenize)
Mittel
CVE-2021-43837
vault-cli contains possible RCE when reading user-defined data
Kritisch
CVE-2021-43572
Improper Verification of Cryptographic Signature in starkbank-ecdsa
Hoch
ghsa-9wx7-jrvc-28mm
Signature verification vulnerability in Stark Bank ecdsa libraries
Mittel
CVE-2021-41202
Overflow/crash in `tf.range`
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.