Alta
CVE-2023-42457
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.334
Restablecer filtros
Alta
CVE-2023-42443
Vyper vulnerable to memory corruption in certain builtins utilizing `msize`
Media
CVE-2023-41885
Piccolo's current `BaseUser.login` implementation is vulnerable to time based user enumeration
Alta
CVE-2023-40712
Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authenticated users who have access to see the task/dag in the UI, to craft a URL, which could lead to unmasking the s
Media
CVE-2023-40611
Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authenticated and DAG-view authorized Users to modify some DAG run detail values when submitting notes. This could hav
Media
CVE-2023-37941
Apache Superset Deserialization of Untrusted Data vulnerability
Media
CVE-2023-20897
Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return. After receiving several bad packets on the request server equal to the number of worker threads, the master will become unrespons
Crítica
CVE-2023-39631
An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary code via the evaluate function in the numexpr library.
Media
CVE-2023-41040
GitPython blind local file inclusion
Alta
CVE-2023-41039
Sandbox escape via various forms of "format".
Media
CVE-2023-36811
Archive spoofing vulnerability in borgbackup
Media
CVE-2023-40170
cross-site inclusion (XSSI) of files in jupyter-server
Media
CVE-2023-39968
Open Redirect Vulnerability in jupyter-server
Alta
CVE-2023-40590
GitPython untrusted search path on Windows systems leading to arbitrary code execution
Alta
CVE-2023-40195
Deserialization of Untrusted Data, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Software Foundation Apache Airflow Spark Provider.
Alta
CVE-2023-38201
Keylime registrar and (untrusted) Agent can be bypassed by an attacker
Alta
CVE-2023-40017
GeoNode Server Side Request forgery
Media
CVE-2023-39441
Apache Airflow missing Certificate Validation
Alta
CVE-2023-37379
Apache Airflow, in versions prior to 2.7.0, contains a security vulnerability that can be exploited by an authenticated user possessing Connection edit privileges. This vulnerability allows the user t
Alta
CVE-2023-40273
The session fixation vulnerability allowed the authenticated user to continue accessing Airflow webserver even after the password of the user has been reset by the admin - up until the expiry of the s
Crítica
CVE-2023-36281
An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via the via the a json file to the load_prompt parameter.
Crítica
CVE-2023-39661
PandasAI vulnerable to arbitrary code execution
Crítica
CVE-2023-38896
An issue in Harrison Chase langchain v.0.0.194 and before allows a remote attacker to execute arbitrary code via the from_math_prompt and from_colored_object_prompt functions.
Crítica
CVE-2023-39659
An issue in langchain langchain-ai v.0.0.232 and before allows a remote attacker to execute arbitrary code via a crafted script to the PythonAstREPLTool._run component.
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.