Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.309
Restablecer filtrosIncomplete string comparison in the numpy.core component in NumPy1.9.x, which allows attackers to fail the APIs via constructing specific string objects.
NumPy Buffer Overflow (Disputed)
vault-cli contains possible RCE when reading user-defined data
lxml's HTML Cleaner allows crafted and SVG embedded scripts to pass through
Improper Authentication in Flask-AppBuilder
Code injection via unsafe YAML loading
Potential bypass of an upstream access control based on URL paths in Django
Permissions not properly checked in Invenio-Drafts-Resources
Improper certificate management in AWS IoT Device SDK v2
Improper certificate management in AWS IoT Device SDK v2
Arbitrary file reading vulnerability in Aim
Path traversal in Matrix Synapse
Improper Verification of Cryptographic Signature in starkbank-ecdsa
Stored XSS in Jupyter nbdime
Arbitrary memory read in `ImmutableConst`
A use of uninitialized value vulnerability in Tensorflow
Segfault due to negative splits in `SplitV`
Access to invalid memory during shape inference in `Cudnn*` ops
Use after free / memory leak in `CollectiveReduceV2`
Heap buffer overflow in `Transpose`
Deadlock in mutually recursive `tf.function` objects
Integer division by 0 in `tf.raw_ops.AllToAll`
FPE in convolutions with zero size filters
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.