Media
CVE-2023-32323
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.333
Restablecer filtros
Alta
CVE-2022-39374
Synapse Denial of service due to incorrect application of event authorization rules during state resolution
Alta
CVE-2022-39335
Synapse does not apply enough checks to servers requesting auth events of events in a room
Alta
CVE-2023-32058
Vyper vulnerable to integer overflow in loop
Media
ghsa-jjgp-whrp-gq8m
in-toto: PGP trust model not (fully) considered
Media
CVE-2023-32076
in-toto vulnerable to Configuration Read From Local Directory
Alta
CVE-2023-31143
Mage-ai missing user authentication
Alta
CVE-2023-30837
vyper vulnerable to storage allocator overflow
Crítica
CVE-2023-25754
Privilege Context Switching Error vulnerability in Apache Software Foundation Apache Airflow.This issue affects Apache Airflow: before 2.6.0.
Media
CVE-2023-29247
Task instance details page in the UI is vulnerable to a stored XSS.This issue affects Apache Airflow: before 2.6.0.
Alta
CVE-2023-30861
Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header
Alta
CVE-2023-32007
** UNSUPPORTED WHEN ASSIGNED ** The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has
Crítica
ghsa-83fm-w79m-64r5
Remote file access vulnerability in `mlflow server` and `mlflow ui` CLIs
Alta
CVE-2023-30628
Kiwi TCMS is an open source test management system. In kiwitcms/Kiwi v12.2 and prior and kiwitcms/enterprise v12.2 and prior,
Alta
CVE-2023-30629
Incorrect success value returned in vyper
Alta
CVE-2023-30620
mindsdb arbitrary file write when extracting a remotely retrieved Tarball
Alta
CVE-2023-30798
MultipartParser denial of service with too many fields or files
Alta
CVE-2023-30797
Lemur subject to insecure random generation
Media
CVE-2023-30608
sqlparse contains a regular expression that is vulnerable to Regular Expression Denial of Service
Alta
CVE-2021-34337
An issue was discovered in Mailman Core before 3.3.5. An attacker with access to the REST API could use timing attacks to determine the value of the configured REST API password and then make arbitrar
Alta
CVE-2023-28707
Apache Airflow Drill Provider vulnerable to improper input validation
Crítica
CVE-2023-28706
Apache Airflow Hive Provider vulnerable to code injection
Crítica
CVE-2023-29374
In LangChain through 0.0.131, the LLMMathChain chain allows prompt injection attacks that can execute arbitrary code via the Python exec method.
Alta
CVE-2023-28836
Wagtail vulnerable to stored Cross-site Scripting attack via ModelAdmin views
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.