Baja
CVE-2024-28088
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.334
Restablecer filtros
Media
CVE-2024-26280
Apache Airflow, versions before 2.8.2, has a vulnerability that allows authenticated Ops and Viewers users to view all information on audit logs, including dag names and usernames they were not permit
Crítica
CVE-2024-2057
A vulnerability was found in LangChain langchain_community 0.0.26. It has been classified as critical. Affected is the function load_local in the library libs/community/langchain_community/retrievers/
Media
CVE-2024-27906
Apache Airflow, versions before 2.8.2, has a vulnerability that allows authenticated users to view DAG code and import errors of DAGs they do not have permission to view through the API and the UI.
Media
CVE-2024-26016
Apache Superset: Improper authorization validation on dashboards and charts import
Crítica
CVE-2024-27444
LangChain Experimental vulnerable to arbitrary code execution
Baja
CVE-2024-0243
langchain Server-Side Request Forgery vulnerability
Media
CVE-2024-26152
Summary
Alta
ghsa-rc4p-p3j9-6577
pypqc private key retrieval vulnerability
Alta
CVE-2024-26130
cryptography NULL pointer dereference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override
Crítica
CVE-2024-23346
pymatgen vulnerable to arbitrary code execution when parsing a maliciously crafted JonesFaithfulTransformation transformation_string
Alta
CVE-2024-26134
cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) (RFC 8949) serialization format. Starting in version 5.5.1 and prior to version 5.6.2, an attacker can crash a
Crítica
CVE-2024-25141
Improper Certificate Validation in apache airflow mongo hook
Alta
CVE-2024-1647
Pyhtml2pdf version 0.0.6 allows an external attacker to remotely obtain
Baja
ghsa-77hh-43cm-v8j6
tuf's Metadata API: Targets.get_delegated_role() is missing input validation
Media
CVE-2024-21624
NoneBot Potential Information Leak in User-Constructed Message Templates
Baja
ghsa-c4cm-r9fh-jgj9
commonground-api-common unexploitable privilege escalation in JWT authentication middleware
Crítica
CVE-2024-24563
Vyper negative array index bounds checks
Media
CVE-2024-0690
An information disclosure flaw was found in ansible-core due to a failure to respect the ANSIBLE_NO_LOG configuration in some scenarios. It was discovered that information is still included in the out
Baja
CVE-2024-24559
Vyper sha3 codegen bug
Alta
CVE-2024-24762
python-multipart vulnerable to Content-Type Header ReDoS
Baja
CVE-2024-24560
Vyper's external calls can overflow return data to return input buffer
Crítica
CVE-2024-24561
Vyper's bounds check on built-in `slice()` function can be overflowed
Media
CVE-2024-23637
OctoPrint Unverified Password Change via Access Control Settings
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.