Alta
pysec-2024-154
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.355
Restablecer filtros
Crítica
CVE-2024-53947
Apache Superset: Improper SQL authorisation, parse not checking for specific postgres functions
Media
CVE-2024-53948
Apache Superset: Error verbosity exposes metadata in analytics databases
Media
CVE-2024-53907
Django denial-of-service in django.utils.html.strip_tags()
Media
CVE-2024-37303
Synapse's unauthenticated writes to the media repository allow planting of problematic content
Alta
CVE-2024-37302
Synapse denial of service through media disk space consumption
Alta
CVE-2024-54000
MobSF vulnerability allows SSRF due to the allow_redirects=True parameter
Alta
ghsa-486g-47cc-8wxf
aiocpa contains credential harvesting code
Sin evaluar
pysec-2024-152
aiocpa 0.1.13 contains credential harvesting code
Alta
CVE-2024-27134
Excessive directory permissions in MLflow leads to local privilege escalation when using spark_udf. This behavior can be exploited by a local attacker to gain elevated permissions by using a ToCToU at
Media
CVE-2024-53253
Sentry improper error handling leaks Application Integration Client Secret
Media
CVE-2024-53425
A heap-buffer-overflow vulnerability was discovered in the SkipSpacesAndLineEnd function in Assimp v5.4.3. This issue occurs when processing certain malformed MD5 model files, leading to an out-of-bou
Alta
CVE-2024-52581
Litestar allows unbounded resource consumption (DoS vulnerability)
Crítica
CVE-2024-47533
cobbler allows anyone to connect to cobbler XML-RPC server with known password and make changes
Media
CVE-2024-37155
OpenCTI May Bypass Introspection Restriction
Alta
CVE-2024-45784
Apache Airflow: Sensitive configuration values are not masked in the logs by default
Alta
CVE-2024-27530
wasm3 139076a contains a Use-After-Free in ForEachModule.
Media
CVE-2024-27529
wasm3 uncontrolled memory allocation vulnerability
Media
CVE-2024-51751
Gradio vulnerable to arbitrary file read with File and UploadButton components
Crítica
CVE-2024-10081
codechecker vulnerable to authentication bypass when using specifically crafted URLs
Crítica
CVE-2024-10082
codechecker authentication method confusion vulnerability allows logging in as the built-in root user from an external service
Media
CVE-2024-51493
OctoPrint has API key access in settings without reauthentication
Crítica
CVE-2024-51734
Access control vulnerable to user data deletion by anonynmous users
Crítica
CVE-2024-42835
langflow v1.0.12 was discovered to contain a remote code execution (RCE) vulnerability via the PythonCodeTool component.
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.