Alta
CVE-2023-24580
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.333
Restablecer filtros
Alta
CVE-2023-25577
High resource usage when parsing multipart form data with many fields
Baja
CVE-2023-23934
Incorrect parsing of nameless cookies leads to __Host- cookies bypass
Alta
ghsa-344m-qcjq-xgrf
Vulnerable OpenSSL included in sgx-dcap-quote-verify-python
Baja
CVE-2023-24816
IPython vulnerable to command injection via set_term_title
Media
CVE-2023-23931
Cipher.update_into can corrupt memory if passed an immutable python object as the outbuf
Media
CVE-2023-23940
OpenZeppelin Contracts contains Improper Verification of Cryptographic Signature
Media
CVE-2023-0591
ubireader_extract_files is vulnerable to path traversal when run against specifically crafted UBIFS files, allowing the attacker to overwrite files outside of the extraction directory (provided the pr
Media
CVE-2023-24622
isInList in the safeurl-python package before 1.2 for Python has an insufficiently restrictive regular expression for external domains, leading to SSRF.
Baja
CVE-2023-23611
LTI 1.3 Grade Pass Back Implementation has Missing Authorization Vulnerability
Crítica
CVE-2023-22884
Command Injection in Apache Airflow and Apache Airflow MySQL Provider
Alta
CVE-2021-32837
mechanize, a library for automatically interacting with HTTP web servers, contains a regular expression that is vulnerable to regular expression denial of service (ReDoS) prior to version 0.4.6. If a
Media
CVE-2016-15010
** UNSUPPPORTED WHEN ASSIGNED **** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as problematic was found in University of Cambridge django-ucamlookup up to 1.9.1. Affected by this vulnerabi
Media
CVE-2022-4721
Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository ikus060/rdiffweb prior to 2.5.5.
Alta
ghsa-g86j-hwg9-77q5
SentinelOne impersonated via PyPI packages
Crítica
CVE-2022-46421
Apache Airflow Hive Provider vulnerable to Command Injection
Alta
CVE-2022-44940
Patchelf out-of-bounds read
Baja
CVE-2022-23531
GuardDog vulnerable to arbitrary file write when scanning a specially-crafted PyPI package
Baja
CVE-2022-23530
GuardDog vulnerable to arbitrary file write when scanning a specially-crafted remote PyPI package
Media
CVE-2022-4526
A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected by this issue is some unknown functionality of the file photologue/templates/photologue/photo_detail
Media
CVE-2022-32531
Apache Bookkeeper vulnerable to Improper Certificate Validation
Media
CVE-2022-23485
Sentry vulnerable to invite code reuse via cookie manipulation
Crítica
CVE-2022-46742
PaddlePaddle vulnerable to Code Injection
Alta
CVE-2022-23472
Passeo uses insecure random number generator
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.