Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 6.824
Restablecer filtrosGoogle TensorFlow 1.7.x and earlier is affected by a Buffer Overflow vulnerability. The type of exploitation is context-dependent.
NULL pointer dereference in Google TensorFlow before 1.12.2 could cause a denial of service via an invalid GIF file.
Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow before 1.7.1, could result in a crash or read from other parts of process memory.
Invalid memory access and/or a heap buffer overflow in the TensorFlow XLA compiler in Google TensorFlow before 1.7.1 could cause a crash or read from other parts of process memory via a crafted config
Google TensorFlow 1.7 and below is affected by: Buffer Overflow. The impact is: execute arbitrary code (local).
Google TensorFlow 1.6.x and earlier is affected by: Null Pointer Dereference. The type of exploitation is: context-dependent.
Improper Input Validation in python-dbusmock
Improper Certificate Validation in urllib3
XSS in jQuery as used in Drupal, Backdrop CMS, and other products
Python-saml allows manipulation of SAML data without invalidation of cryptographic signature
Improper Neutralization of CRLF Sequences in urllib3 library for Python
Apache Airflow vulnerable to CSRF Attacks
Apache Airflow vulnerable to Stored XSS
In trytond/model/modelstorage.py in Tryton 4.2 before 4.2.21, 4.4 before 4.4.19, 4.6 before 4.6.14, 4.8 before 4.8.10, and 5.0 before 5.0.6, an authenticated user can order records based on a field fo
Jinja2 sandbox escape vulnerability
Jinja2 sandbox escape via string formatting
Moderate severity vulnerability that affects roundup
Jupyter Notebook open redirect vulnerability
CoAPthon DoS due to Exceptions
CoAPthon3 vulnerable to Deserialization of Untrusted Data
Open Redirect vulnerability in jupyterhub and notebook
Ansible Path Traversal vulnerability
ipycache is vulnerable to Code Injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.