Alta
CVE-2022-31152
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.984
Restablecer filtros
Media
CVE-2022-38170
Apache Airflow exposes arbitrary file content
Crítica
CVE-2022-38054
Apache Airflow Session Fixation vulnerability
Crítica
CVE-2022-2996
python-scciclient vulnerable to Man-in-the-middle (MITM) attacks
Media
CVE-2022-36046
Next.js is a React framework that can provide building blocks to create web applications. All of the following must be true to be affected by this CVE: Next.js version 12.2.3, Node.js version above v1
Media
CVE-2021-32862
nbconvert vulnerable to cross-site scripting (XSS) via multiple exploit paths
Alta
CVE-2022-36024
Bots using py-cord as Discord API wrapper are vulnerable to shutdowns through remote code execution
Media
CVE-2022-35918
Streamlit is a data oriented application development framework for python. Users hosting Streamlit app(s) that use custom components are vulnerable to a directory traversal attack that could leak data
Alta
CVE-2022-36447
chia-blockchain tokens can be inflated to an arbitrary extent
Alta
CVE-2022-33977
untangle vulnerable to XML Entity Expansion
Media
CVE-2022-30187
Microsoft: CBC Padding Oracle in Azure Blob Storage Encryption Library
Crítica
CVE-2022-31558
Tooxie Shiva 0.10.0 allows absolute path traversal because Flask send_file function used unsafely
Crítica
CVE-2022-31605
Unsafe yaml deserialization in NVFlare
Crítica
CVE-2022-31604
Unsafe deserialisation in the PKI implementation scheme of NVFlare
Alta
CVE-2022-31052
URL previews of unusual or maliciously-crafted pages can crash Synapse media repositories or Synapse monoliths
Sin evaluar
CVE-2022-30885
** Reserved ** The pyesasky for python, as distributed on PyPI, included a code-execution backdoor inserted by a third party. The current version, without this backdoor, is 1.2.0-1.4.2.
Media
CVE-2022-29238
Jupyter Notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.12, authenticated requests to the notebook server with `ContentsManager.allow_hidden = False` only
Alta
CVE-2022-29241
Jupyter server Token bruteforcing
Crítica
CVE-2022-32563
An issue was discovered in Couchbase Sync Gateway 3.x before 3.0.2. Admin credentials are not verified when using X.509 client-certificate authentication from Sync Gateway to Couchbase Server. When Sy
Alta
CVE-2022-31015
Uncaught Exception (due to a data race) leads to process termination in Waitress
Sin evaluar
CVE-2022-29361
** DISPUTED ** Improper parsing of HTTP requests in Pallets Werkzeug v2.1.0 and below allows attackers to perform HTTP Request Smuggling using a crafted HTTP request with multiple requests included in
Alta
CVE-2022-29216
Code injection in `saved_model_cli` in TensorFlow
Alta
CVE-2021-31605
furlongm openvpn-monitor through 1.1.3 allows %0a command injection via the OpenVPN management interface socket. This can shut down the server via signal%20SIGTERM.
Alta
CVE-2021-38598
OpenStack Neutron before 16.4.1, 17.x before 17.1.3, and 18.0.0 allows hardware address impersonation when the linuxbridge driver with ebtables-nft is used on a Netfilter-based platform. By sending ca
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.