Media
CVE-2024-1892
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 6.855
Restablecer filtros
Media
CVE-2024-25112
Exiv2 has a denial of service due to unbounded recursion in QuickTimeVideo::multipleEntriesDecoder
Media
CVE-2024-24826
Exiv2 has an out-of-bounds read in QuickTimeVideo::NikonTagsDecoder
Media
CVE-2024-21624
NoneBot Potential Information Leak in User-Constructed Message Templates
Baja
ghsa-c4cm-r9fh-jgj9
commonground-api-common unexploitable privilege escalation in JWT authentication middleware
Crítica
CVE-2024-24825
DIRAC's TokenManager does not check permissions on cached tokens
Crítica
CVE-2024-24563
Vyper negative array index bounds checks
Alta
CVE-2024-24680
Django denial-of-service attack in the intcomma template filter
Media
CVE-2024-0690
An information disclosure flaw was found in ansible-core due to a failure to respect the ANSIBLE_NO_LOG configuration in some scenarios. It was discovered that information is still included in the out
Crítica
CVE-2024-0964
A local file include could be remotely triggered in Gradio due to a vulnerable user-supplied JSON value in an API request.
Baja
CVE-2024-24559
Vyper sha3 codegen bug
Alta
CVE-2024-24762
python-multipart vulnerable to Content-Type Header ReDoS
Baja
CVE-2024-24560
Vyper's external calls can overflow return data to return input buffer
Media
CVE-2024-21485
Dash apps vulnerable to Cross-site Scripting
Crítica
CVE-2024-24561
Vyper's bounds check on built-in `slice()` function can be overflowed
Media
CVE-2024-23637
OctoPrint Unverified Password Change via Access Control Settings
Media
CVE-2023-47116
Label Studio SSRF on Import Bypassing `SSRF_PROTECTION_ENABLED` Protections
Media
CVE-2024-24567
Vyper's raw_call `value=` kwargs not disabled for static and delegate calls
Baja
CVE-2024-21671
vantage6 vulnerable to username timing attack
Media
CVE-2024-21653
vantage6 has insecure SSH configuration for node and server containers
Alta
CVE-2024-21649
vantage6 remote code execution vulnerability
Baja
CVE-2024-22193
vantage6 may create unencrypted tasks in encrypted collaboration
Crítica
CVE-2024-22682
DuckDB <=0.9.2 and DuckDB extension-template <=0.9.2 are vulnerable to malicious extension injection via the custom extension feature.
Media
CVE-2024-23829
aiohttp's HTTP parser (the python one, not llhttp) still overly lenient about separators
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.