Crítica
CVE-2022-28346
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 6.838
Restablecer filtros
Alta
CVE-2022-24758
The Jupyter notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.9, unauthorized actors can access sensitive information from server logs. Anytime a 5xx error i
Crítica
CVE-2022-24801
Inconsistent Interpretation of HTTP Requests in twisted.web
Alta
CVE-2022-24787
Incorrect Comparison in Vyper
Crítica
CVE-2022-27177
Use of Externally-Controlled Format String in consoleme
Alta
CVE-2022-24798
Improper Removal of Sensitive Information Before Storage or Transfer in irrd
Alta
CVE-2022-25598
Uncontrolled Resource Consumption in Apache DolphinScheduler
Alta
CVE-2022-22934
An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Salt Masters do not sign pillar data with the minion’s public key, which can result in attackers substituting arbit
Alta
CVE-2022-22941
An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. When configured as a Master-of-Masters, with a publisher_acl, if a user configured in the publisher_acl targets any
Alta
CVE-2022-22936
An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Job publishes and file server replies are susceptible to replay attacks, which can result in an attacker replaying
Baja
CVE-2022-22935
An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. A minion authentication denial of service can cause a MiTM attacker to force a minion process to stop by impersonat
Alta
CVE-2022-24303
Path traversal in Pillow
Alta
CVE-2022-24757
The Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications. Prior to version 1.15.4, unauthorized actors can access sensitive information f
Alta
CVE-2022-25568
MotionEye v0.42.1 and below allows attackers to access sensitive information via a GET request to /config/list. To exploit this vulnerability, a regular user password must be unconfigured.
Alta
CVE-2022-0315
Use of insecure temporary file in Horovod
Crítica
CVE-2022-26184
Poetry before v1.1.9 contains Untrusted Search Path
Crítica
CVE-2022-24766
Insufficient Protection against HTTP Request Smuggling in mitmproxy
Alta
CVE-2022-24770
`gradio` is an open source framework for building interactive machine learning models and demos. Prior to version 2.8.11, `gradio` suffers from Improper Neutralization of Formula Elements in a CSV Fil
Alta
CVE-2022-24302
Race Condition in Paramiko
Alta
CVE-2022-24761
HTTP Request Smuggling in waitress
Media
CVE-2021-23556
Command injection in guake
Media
CVE-2022-0430
Exposure of Sensitive information in httpie
Alta
CVE-2022-21187
Command injection in libvcs and vcspull
Crítica
ghsa-32gv-6cf3-wcmq
HTTP/2 DoS Attacks: Ping, Reset, and Settings Floods
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.