Crítica
CVE-2023-47128
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.997
Restablecer filtros
Crítica
CVE-2023-43791
Label Studio has Hardcoded Django `SECRET_KEY` that can be Abused to Forge Session Tokens
Alta
CVE-2023-45875
An issue was discovered in Couchbase Server 7.2.0. There is a private key leak in debug.log while adding a pre-7.0 node to a 7.2 cluster.
Media
CVE-2023-43796
Synapse vulnerable to leak of remote user device information
Media
CVE-2023-46137
twisted.web has disordered HTTP pipeline response
Alta
CVE-2023-45815
Viewing wget extractor output while logged in as an admin allows archived JS to execute in the admins context
Alta
CVE-2023-46229
LangChain before 0.0.317 allows SSRF via document_loaders/recursive_url_loader.py because crawling can proceed from an external server to an internal server.
Media
CVE-2023-45803
urllib3's request body not stripped after redirect from 303 status changes request method to GET
Media
CVE-2023-45129
matrix-synapse vulnerable to denial of service due to malicious server ACL events
Alta
CVE-2023-41047
OctoPrint vulnerable to Improper Neutralization of Special Elements Used in a Template Engine
Alta
CVE-2023-43804
`Cookie` HTTP header isn't stripped on cross-origin redirects
Alta
CVE-2023-26151
Versions of the package asyncua before 0.9.96 are vulnerable to Denial of Service (DoS) such that an attacker can send a malformed packet and as a result, the server will enter into an infinite loop a
Crítica
ghsa-4mqg-h5jf-j9m7
TorchServe Pre-Auth Remote Code Execution
Baja
CVE-2023-41335
matrix-synapse vulnerable to temporary storage of plaintext passwords during password changes
Crítica
CVE-2023-41419
Gevent allows remote attacker to escalate privileges
Alta
CVE-2023-42261
Mobile Security Framework (MobSF) <=v3.7.8 Beta is vulnerable to Insecure Permissions. NOTE: the vendor's position is that authentication is intentionally not implemented because the product is not in
Alta
CVE-2023-42457
plone.rest allows users to use HTTP verbs such as GET, POST, PUT, DELETE, etc. in Plone. Starting in the 2.x branch and prior to versions 2.0.1 and 3.0.1, when the `++api++` traverser is accidentally
Alta
CVE-2023-42439
GeoNode vulnerable to SSRF Bypass to return internal host data
Media
CVE-2023-41885
Piccolo's current `BaseUser.login` implementation is vulnerable to time based user enumeration
Media
CVE-2023-39265
Apache Superset Improper Input Validation vulnerability
Media
CVE-2023-36388
Apache Superset Server Side Request Forgery vulnerability
Media
CVE-2023-20897
Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return. After receiving several bad packets on the request server equal to the number of worker threads, the master will become unrespons
Media
CVE-2023-40170
cross-site inclusion (XSSI) of files in jupyter-server
Media
CVE-2023-39968
Open Redirect Vulnerability in jupyter-server
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.