Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.309
Restablecer filtrosSession operations in eager mode lead to null pointer dereferences
Division by zero in `Conv3D`
Null pointer dereference via invalid Ragged Tensors
Reference binding to null pointer in `MatrixDiag*` ops
Heap out of bounds write in `RaggedBinCount`
Type confusion during tensor casts lead to dereferencing null pointers
Division by 0 in `DenseCountSparseOutput`
Heap buffer overflow in `RaggedBinCount`
Use of "infinity" as an input to datetime and date fields causes infinite loop in pydantic
Denial of service attack via push rule patterns in matrix-synapse
Improper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet
Unauthorized access through URL manipulation
Cross-site Scripting in Apache Airflow
In the course of work on the open source project it was discovered that authenticated users running queries against Hive and Presto database engines could access information via a number of templated
Ansible Exposes Sensitive Information
Uncontrolled Resource Consumption in pillow
Improper validation of URLs ('Cross-site Scripting') in Wagtail rich text fields
VVE-2021-0002: Incorrect `returndatasize` when using simple forwarder proxies deployed prior to EIP-1167 adoption
Malicious users could abuse Sydent to control the content of invitation emails
SSRF in Sydent due to missing validation of hostnames
Sydent vulnerable to denial of service attack via memory exhaustion
Sydent DoS (via resource exhaustion) due to improper input validation
SQL Injection via in django-debug-toolbar
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.