Alta
CVE-2021-42521
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 6.856
Restablecer filtros
Alta
CVE-2021-4041
ansible-runner vulnerable to shell command injection
Alta
CVE-2022-25304
Uncontrolled Resource Consumption in asyncua and opcua
Media
CVE-2021-3702
ansible-runner vulnerable to Race Condition
Media
CVE-2021-3701
ansible-runner has default temporary files written to world R/W locations
Alta
CVE-2022-2930
Unverified Password Change in GitHub repository octoprint/octoprint prior to 1.8.3.
Media
CVE-2021-32862
nbconvert vulnerable to cross-site scripting (XSS) via multiple exploit paths
Alta
CVE-2022-36024
Bots using py-cord as Discord API wrapper are vulnerable to shutdowns through remote code execution
Alta
ghsa-pcjh-6r5h-r92r
django-sendfile2 before 0.7.0 contains reflected file download vulnerability
Media
ghsa-7r9x-qrpr-3cxw
mofh Vulnerable to Improper Restriction of XML External Entity Reference
Alta
CVE-2022-36124
It is possible for a Reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system. This issue affects Rust applications using Apache Avro Rust SDK prior to 0.14
Media
CVE-2022-35918
Streamlit is a data oriented application development framework for python. Users hosting Streamlit app(s) that use custom components are vulnerable to a directory traversal attack that could leak data
Alta
CVE-2022-36359
Django vulnerable to Reflected File Download attack
Baja
CVE-2022-31177
Flask-AppBuilder before v4.1.3 allows inference of sensitive information through query strings
Media
CVE-2022-2589
Fava vulnerable to reflected cross-site scripting
Media
ghsa-9x8m-2xpf-crp3
Scrapy before 2.6.2 and 1.8.3 vulnerable to one proxy sending credentials to another
Alta
CVE-2022-36447
chia-blockchain tokens can be inflated to an arbitrary extent
Crítica
CVE-2022-34558
WMAgent arbitrary code execution via a crafted dbs-client package
Media
CVE-2022-34529
WASM3 v0.5.0 was discovered to contain a segmentation fault via the component Compile_Memory_CopyFill.
Alta
CVE-2022-33977
untangle vulnerable to XML Entity Expansion
Alta
CVE-2022-31471
untangle vulnerable to Improper Restriction of XML External Entity Reference
Alta
CVE-2022-34749
Mistune vulnerable to catastrophic backtracking
Media
CVE-2022-2514
The time and filter parameters in Fava prior to v1.22 are vulnerable to reflected XSS due to the lack of escaping of error messages which contained the parameters in verbatim.
Media
CVE-2022-2523
Fava vulnerable to Reflected Cross-site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.