Crítica
CVE-2022-38638
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 6.856
Restablecer filtros
Crítica
CVE-2022-3167
rdiffweb vulnerable to Improper Restriction of Rendered UI Layers or Frames
Media
CVE-2022-36082
mangadex-downloader vulnerable to unauthorized file reading
Alta
CVE-2022-36070
Poetry vulnerable to Untrusted Search Path leading to Local Code Execution on Windows
Alta
CVE-2022-36069
Poetry Argument Injection can lead to Local Code Execution
Alta
CVE-2022-40023
mako is vulnerable to Regular Expression Denial of Service
Alta
CVE-2022-31020
Indy's NODE_UPGRADE transaction vulnerable to remote code execution
Alta
CVE-2022-38369
Apache IoTDB version 0.13.0 is vulnerable by session id attack. Users should upgrade to version 0.13.1 which addresses this issue.
Alta
CVE-2022-30331
The User-Defined Functions (UDF) feature in TigerGraph 3.6.0 allows installation of a query (in the GSQL query language) without proper validation. Consequently, an attacker can execute arbitrary C++
Alta
CVE-2022-31152
Denial of service due to incorrect application of event authorization rules
Media
CVE-2022-38170
Apache Airflow exposes arbitrary file content
Crítica
CVE-2022-38054
Apache Airflow Session Fixation vulnerability
Crítica
CVE-2022-39227
python-jwt vulnerable to token forgery with new claims
Crítica
CVE-2022-2996
python-scciclient vulnerable to Man-in-the-middle (MITM) attacks
Media
CVE-2022-36046
Next.js is a React framework that can provide building blocks to create web applications. All of the following must be true to be affected by this CVE: Next.js version 12.2.3, Node.js version above v1
Media
CVE-2022-0718
python-oslo-utils has improper password parsing
Crítica
CVE-2022-34668
NVFLARE unsafe deserialization due to Pickle
Crítica
CVE-2022-38792
exotel-py includes code execution backdoor inserted by a third party
Crítica
CVE-2021-3563
Openstack Keystone Incorrect Authorization vulnerability
Sin evaluar
pysec-2022-252
The deep-translator project on PyPI was taken over via user account compromise via a phishing attack and a new malicious release made which contained code which some environment variables and download
Sin evaluar
pysec-2022-251
The spam project on PyPI was taken over via user account compromise via a phishing attack and a new malicious release made which contained code which some environment variables and downloaded and ran
Sin evaluar
pysec-2022-250
The exotel project on PyPI was taken over via user account compromise via a phishing attack and a new malicious release made which contained code which some environment variables and downloaded and ra
Media
CVE-2021-3427
Deluge Web-UI vulnerable to XSS through a crafted torrent file
Alta
CVE-2022-2255
Incorrect header handling in mod-wsgi
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.