Alta
CVE-2023-42457
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 6.855
Restablecer filtros
Crítica
CVE-2019-19450
ReportLab vulnerable to remote code execution via paraparser
Sin evaluar
pysec-2023-175
Pillow versions before v10.0.1 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-5129 (previously CVE-2023-4863). Pillow v10.0.1 upgrades the bundled libwebp binary to v1.3.2.
Sin evaluar
pysec-2023-174
imagecodecs versions before v2023.9.18 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-5129 (previously CVE-2023-4863). imagecodecs v2023.9.18 upgrades the bundled libwebp binary to
Alta
CVE-2023-42443
Vyper vulnerable to memory corruption in certain builtins utilizing `msize`
Media
CVE-2023-42441
Vyper has incorrect re-entrancy lock when key is empty string
Alta
CVE-2023-42439
GeoNode vulnerable to SSRF Bypass to return internal host data
Media
CVE-2023-41885
Piccolo's current `BaseUser.login` implementation is vulnerable to time based user enumeration
Alta
CVE-2023-40712
Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authenticated users who have access to see the task/dag in the UI, to craft a URL, which could lead to unmasking the s
Media
CVE-2023-40611
Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authenticated and DAG-view authorized Users to modify some DAG run detail values when submitting notes. This could hav
Alta
Explotada en ataques
CVE-2023-4863
libwebp: OOB write in BuildHuffmanTable
Media
CVE-2023-41369
The Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, 107, 108, allows an attacker to upload the XML file as an attachment. When clicked on the XML file in
Media
CVE-2023-41050
Information disclosure in AccessControl
Media
CVE-2023-39265
Apache Superset Improper Input Validation vulnerability
Media
CVE-2023-37941
Apache Superset Deserialization of Untrusted Data vulnerability
Media
CVE-2023-32672
Apache Superset has incorrect authorization check
Media
CVE-2023-27523
Apache Superset vulnerable to improper data authorization
Media
CVE-2023-36388
Apache Superset Server Side Request Forgery vulnerability
Media
CVE-2023-36387
Apache Superset has improper default REST API permission for Gamma users
Media
CVE-2023-39264
Apache Superset may expose internal traces on REST API endpoints
Media
CVE-2023-27526
Apache Superset users may incorrectly create resources using the import charts feature
Media
CVE-2023-20897
Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return. After receiving several bad packets on the request server equal to the number of worker threads, the master will become unrespons
Alta
CVE-2023-20898
Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environ
Media
CVE-2023-41052
incorrect order of evaluation of side effects for some builtins
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.