Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.333
Restablecer filtrosTensorFlow vulnerable to `CHECK` failure in `AvgPoolOp`
TensorFlow vulnerable to `CHECK` fail in `QuantizeAndDequantizeV3`
TensorFlow vulnerable to `CHECK` fail in `RaggedTensorToVariant`
TensorFlow vulnerable to `CHECK` fail in `FakeQuantWithMinMaxVarsPerChannel`
TensorFlow vulnerable to OOB write in `scatter_nd` in TF Lite
TensorFlow vulnerable to OOB read in `Gather_nd` in TF Lite
TensorFlow vulnerable to `CHECK` failure in tf.reshape via overflows
TensorFlow vulnerable to `CHECK` failure in `SobolSample` via missing validation
indy-node is the server portion of Hyperledger Indy, a distributed ledger purpose-built for decentralized identity. In vulnerable versions of indy-node, an attacker can max out the number of client co
TensorFlow vulnerable to `CHECK` fail in `tf.sparse.cross`
TensorFlow vulnerable to `CHECK` fail in `Conv2DBackpropInput`
rdiffweb CSRF vulnerability in profile's SSH keys can lead to unauthorized access
Python-TUF vulnerable to incorrect threshold signature computation for new root metadata
VNCAuthProxy authentication bypass vulnerability
LIEF commit 365a16a was discovered to contain a segmentation violation via the component CoreFile.tcc:69.
LIEF commit 5d1d643 was discovered to contain a segmentation violation via the function LIEF::MachO::SegmentCommand::file_offset() at /MachO/SegmentCommand.cpp.
LIEF commit 365a16a was discovered to contain a heap-buffer overflow via the function print_binary at /c/macho_reader.c.
LIEF commit 5d1d643 was discovered to contain a heap-buffer overflow in the component /core/CorePrPsInfo.tcc.
LIEF commit 365a16a was discovered to contain a reachable assertion abort via the component BinaryStream.hpp.
rdiffweb contains Weak Password Requirements
rdiffweb vulnerable to Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
Casdoor v1.97.3 was discovered to contain an arbitrary file write vulnerability via the fullFilePath parameter at /api/upload-resource.
Poetry vulnerable to Untrusted Search Path leading to Local Code Execution on Windows
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.