Alta
CVE-2024-21642
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.999
Restablecer filtros
Media
CVE-2023-48795
Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin
Media
CVE-2023-50715
User accounts disclosed to unauthenticated actors on the LAN
Media
CVE-2023-50248
Out of memory error when submitting the dataset form with a specially-crafted field
Media
CVE-2023-48299
TorchServe ZipSlip
Alta
CVE-2023-47890
Download to arbitrary folder can lead to RCE
Alta
CVE-2023-48224
Ethyca Fides Cryptographically Weak Generation of One-Time Codes for Identity Verification
Alta
CVE-2023-32786
Langchain Server-Side Request Forgery vulnerability
Media
CVE-2023-46134
dtale vulnerable to Remote Code Execution through the Custom Filter Input
Media
CVE-2023-46125
Fides Information Disclosure Vulnerability in Config API Endpoint
Alta
CVE-2023-46124
Fides Server-Side Request Forgery Vulnerability in Custom Integration Upload
Baja
CVE-2023-46126
Fides JavaScript Injection Vulnerability in Privacy Center URL
Alta
CVE-2023-43810
opentelemetry-instrumentation Denial of Service vulnerability due to unbound cardinality metrics
Media
CVE-2023-5002
pgAdmin failed to properly control the server code
Alta
CVE-2023-4785
Denial of Service Vulnerability in gRPC TCP Server (Posix-compatible platforms)
Baja
CVE-2023-41329
Domain restrictions bypass via DNS Rebinding in WireMock and WireMock Studio webhooks, proxy and recorder modes
Alta
CVE-2023-41319
Remote Code Execution in Custom Integration Upload
Alta
CVE-2023-27604
Airflow Sqoop Provider RCE Vulnerability
Alta
CVE-2023-33953
Excessive Iteration in gRPC
Alta
CVE-2023-40272
Apache Airflow Spark Provider Improper Input Validation vulnerability
Media
CVE-2023-39523
ScanCode.io command injection in docker image fetch process
Baja
CVE-2023-37481
Fides Webserver Vulnerable to SVG Bomb File Uploads
Baja
CVE-2023-37480
Fides Webserver Vulnerable to Zip Bomb File Uploads
Alta
CVE-2023-38200
Keylime's registrar vulnerable to Denial-of-service attack via a single open connection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.