Crítica
CVE-2023-38860
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 6.855
Restablecer filtros
Media
CVE-2023-54397
Tornado vulnerable to HTTP request smuggling via improper parsing of `Content-Length` fields and chunk lengths
Alta
CVE-2023-39553
apache-airflow-providers-apache-drill Improper Input Validation vulnerability
Crítica
CVE-2023-40267
GitPython vulnerable to remote code execution due to insufficient sanitization of input arguments
Media
CVE-2023-27506
Authenticated Local Privilege Escalation vulnerability in Intel Optimization for Tensorflow
Media
CVE-2023-35838
The WireGuard client 0.5.3 on Windows insecurely configures the operating system and firewall such that traffic to a local network that uses non-RFC1918 IP addresses is blocked. This allows an adversa
Alta
CVE-2023-38759
Cross Site Request Forgery (CSRF) vulnerability in wger Project wger Workout Manager 2.2.0a3 allows a remote attacker to gain privileges via the user-management feature in the gym/views/gym.py, templa
Media
CVE-2023-38758
Cross Site Scripting vulnerability in wger Project wger Workout Manager v.2.2.0a3 allows a remote attacker to gain privileges via the license_author field in the add-ingredient function in the templat
Crítica
CVE-2023-39363
Vyper has incorrectly allocated named re-entrancy locks
Alta
CVE-2023-39508
Execution with Unnecessary Privileges, : Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache Airflow.The "Run Task" feature enables authentica
Crítica
CVE-2023-36095
An issue in Harrison Chase langchain v.0.0.194 allows an attacker to execute arbitrary code via the python exec calls in the PALChain, affected functions include from_math_prompt and from_colored_obje
Crítica
CVE-2023-38699
MindsDB can be made to not verify SSL certificates
Crítica
CVE-2023-38686
Sydent does not verify email server certificates
Alta
CVE-2023-37920
Removal of e-Tugra root certificate
Baja
ghsa-jm77-qphf-c4w8
pyca/cryptography's wheels include vulnerable OpenSSL
Alta
CVE-2023-4033
OS Command Injection in GitHub repository mlflow/mlflow prior to 2.6.0.
Crítica
CVE-2023-38673
Command injection in PaddlePaddle
Media
CVE-2023-38672
Float point exception (FPE) in paddlepaddle
Alta
CVE-2023-38671
Heap buffer overflow in PaddlePaddle
Media
CVE-2023-38670
Null pointer dereference in PaddlePaddle
Alta
CVE-2023-38669
Use after free in PaddlePaddle
Media
CVE-2023-38501
copyparty vulnerable to reflected cross-site scripting via k304 parameter
Media
CVE-2023-37902
ecrecover can return undefined data if signature does not verify
Alta
CVE-2023-36826
Improper authorization on debug and artifact file downloads
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.