Alta
CVE-2021-33926
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.984
Restablecer filtros
Media
CVE-2022-47419
Mayan EDMS DMS XSS vulnerability
Media
CVE-2022-47951
OpenStack Cinder, glance, and Nova vulnerable to Path Traversal
Alta
CVE-2021-32837
mechanize, a library for automatically interacting with HTTP web servers, contains a regular expression that is vulnerable to regular expression denial of service (ReDoS) prior to version 0.4.6. If a
Alta
CVE-2022-45197
Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker to pose as any server in the eyes of Slixmpp.
Alta
CVE-2022-40899
An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header from malicious web server.
Baja
CVE-2022-23530
GuardDog vulnerable to arbitrary file write when scanning a specially-crafted remote PyPI package
Media
CVE-2022-32531
Apache Bookkeeper vulnerable to Improper Certificate Validation
Media
CVE-2022-45402
In Apache Airflow versions prior to 2.4.3, there was an open redirect in the webserver's `/login` endpoint.
Media
CVE-2022-43985
In Apache Airflow versions prior to 2.4.2, there was an open redirect in the webserver's `/confirm` endpoint.
Alta
CVE-2022-43766
Apache IoTDB version 0.12.2 to 0.12.6, 0.13.0 to 0.13.2 are vulnerable to a Denial of Service attack when accepting untrusted patterns for REGEXP queries with Java 8. Users should upgrade to 0.13.3 wh
Crítica
CVE-2022-37298
Shinken Solutions Shinken Monitoring vulnerable to Incorrect Access Control
Media
ghsa-8r99-h8j2-rw64
Twisted vulnerable to HTTP Request Smuggling Attacks
Alta
CVE-2022-39280
ReDoS issue in dparse
Alta
CVE-2022-36551
A Server Side Request Forgery (SSRF) in the Data Import module in Heartex - Label Studio Community Edition versions 1.5.0 and earlier allows an authenticated user to access arbitrary files on the syst
Media
CVE-2022-40754
In Apache Airflow 2.3.0 through 2.3.4, there was an open redirect in the webserver's `/confirm` endpoint.
Media
CVE-2022-35960
TensorFlow vulnerable to `CHECK` failure in `TensorListReserve` via missing validation
Alta
CVE-2022-31006
indy-node is the server portion of Hyperledger Indy, a distributed ledger purpose-built for decentralized identity. In vulnerable versions of indy-node, an attacker can max out the number of client co
Alta
CVE-2022-3221
rdiffweb CSRF vulnerability in profile's SSH keys can lead to unauthorized access
Crítica
CVE-2022-36436
VNCAuthProxy authentication bypass vulnerability
Alta
CVE-2022-3174
rdiffweb vulnerable to Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
Alta
CVE-2022-36070
Poetry vulnerable to Untrusted Search Path leading to Local Code Execution on Windows
Alta
CVE-2022-36069
Poetry Argument Injection can lead to Local Code Execution
Alta
CVE-2022-38369
Apache IoTDB version 0.13.0 is vulnerable by session id attack. Users should upgrade to version 0.13.1 which addresses this issue.
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.