Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 6.856
Restablecer filtros`FractionalMaxPoolGrad` Heap out of bounds read
`tf.raw_ops.Mfcc` crashes
`MirrorPadGrad` heap out of bounds read
Buffer overflow in `CONV_3D_TRANSPOSE` on TFLite
`CHECK_EQ` fail in `tf.raw_ops.TensorListResize`
Segfault in `tf.raw_ops.TensorListConcat`
`CHECK` fail in `BCast` overflow
Segfault via invalid attributes in `pywrap_tfe_src.cc`
FPE in `tf.image.generate_bounding_box_proposals`
Overflow in `tf.keras.losses.poisson`
Overflow in `ImageProjectiveTransformV2`
Overflow in `FusedResizeAndPadConv2D`
Seg fault in `ndarray_tensor_bridge` due to zero and large inputs
Out of bounds segmentation fault due to unequal op inputs in Tensorflow
LIEF heap buffer overflow in the LIEF::MachO::BinaryParser::parse_dyldinfo_generic_bind
Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6.
Insufficient Session Expiration in GitHub repository ikus060/rdiffweb prior to 2.5.0.
In Apache Airflow versions prior to 2.4.3, there was an open redirect in the webserver's `/login` endpoint.
A vulnerability in UI of Apache Airflow allows an attacker to view unmasked secrets in rendered template values for tasks which were not executed (for example when they were depending on past and prev
A vulnerability in Example Dags of Apache Airflow allows an attacker with UI access who can trigger DAGs, to execute arbitrary commands via manually provided run_id parameter. This issue affects Apach
Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL.
Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification).
Cross Site Scripting vulnerability in wsgidav when directory browsing is enabled
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.