Alta
CVE-2023-37271
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 685
Restablecer filtros
Alta
CVE-2023-36814
Products.CMFCore unauthenticated denial of service and crash via unchecked use of input with Python's marshal module
Alta
CVE-2022-39335
Synapse does not apply enough checks to servers requesting auth events of events in a room
Media
CVE-2023-32675
Vyper's nonpayable default functions are sometimes payable
Alta
CVE-2023-30837
vyper vulnerable to storage allocator overflow
Crítica
ghsa-83fm-w79m-64r5
Remote file access vulnerability in `mlflow server` and `mlflow ui` CLIs
Alta
CVE-2023-30629
Incorrect success value returned in vyper
Alta
CVE-2023-30620
mindsdb arbitrary file write when extracting a remotely retrieved Tarball
Media
CVE-2022-23522
Arbitrary file write in mindsdb when Extracting Tarballs retrieved from a remote location
Alta
CVE-2023-26043
GeoServer style upload functionality vulnerable to XML External Entity (XXE) injection
Media
CVE-2023-23940
OpenZeppelin Contracts contains Improper Verification of Cryptographic Signature
Media
CVE-2023-0591
ubireader_extract_files is vulnerable to path traversal when run against specifically crafted UBIFS files, allowing the attacker to overwrite files outside of the extraction directory (provided the pr
Media
CVE-2022-4572
A vulnerability, which was classified as problematic, has been found in UBI Reader up to 0.8.0. Affected by this issue is the function ubireader_extract_files of the file ubireader/ubifs/output.py of
Baja
CVE-2022-23531
GuardDog vulnerable to arbitrary file write when scanning a specially-crafted PyPI package
Baja
CVE-2022-23530
GuardDog vulnerable to arbitrary file write when scanning a specially-crafted remote PyPI package
Crítica
CVE-2022-44900
A directory traversal vulnerability in the SevenZipFile.extractall() function of the python library py7zr v0.20.0 and earlier allows attackers to write arbitrary files via extracting a crafted 7z file
Media
CVE-2022-41889
Segfault via invalid attributes in `pywrap_tfe_src.cc`
Alta
CVE-2022-40604
In Apache Airflow 2.3.0 through 2.3.4, part of a url was unnecessarily formatted, allowing for possible information extraction.
Alta
CVE-2022-34749
Mistune vulnerable to catastrophic backtracking
Crítica
CVE-2022-34265
Django `Trunc()` and `Extract()` database functions vulnerable to SQL Injection
Alta
CVE-2022-29255
Multiple evaluation of contract address in call in vyper
Media
CVE-2014-4301
Multiple cross-site scripting (XSS) vulnerabilities in the respond_error function in routing.py in Eugene Pankov Ajenti before 1.2.21.7 allow remote attackers to inject arbitrary web script or HTML vi
Alta
CVE-2008-5646
Unspecified vulnerability in Trac before 0.11.2 allows attackers to cause a denial of service via unknown attack vectors related to "certain wiki markup."
Media
CVE-2008-5647
Unspecified vulnerability in the HTML sanitizer filter in Trac before 0.11.2 allows attackers to conduct phishing attacks via unknown attack vectors.
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.