Sin evaluar
794
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Media
CVE-2023-36829
Sentry CORS misconfiguration
Crítica
CVE-2023-29824
** DISPUTED ** A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0. NOTE: the vendor and discoverer indicate that this is not a security issue.
Alta
CVE-2023-3531
TeamPass Cross-site Scripting vulnerability
Alta
CVE-2023-30601
Apache Cassandra: Privilege escalation when enabling FQL/Audit logs
Crítica
Explotada en ataques
CVE-2023-33246
Apache RocketMQ may have remote code execution vulnerability when using update configuration function
Crítica
CVE-2023-31098
Apache InLong has Weak Password Requirements in Apache InLong
Alta
CVE-2023-28709
Apache Tomcat - Fix for CVE-2023-24998 was incomplete
Crítica
CVE-2023-31062
Apache InLong Improper Privilege Management vulnerability
Alta
CVE-2023-31058
Apache InLong Deserialization of Untrusted Data Vulnerability
Alta
CVE-2023-31103
Apache InLong Exposure of Resource to Wrong Sphere vulnerability
Alta
CVE-2023-31453
Apache InLong Incorrect Permission Assignment for Critical Resource Vulnerability
Alta
CVE-2023-31064
Apache InLong has Files or Directories Accessible to External Parties
Alta
CVE-2023-31454
Apache InLong vulnerable to Incorrect Permission Assignment for Critical Resource
Crítica
CVE-2023-31066
Apache InLong has Files or Directories Accessible to External Parties in Apache InLong
Alta
CVE-2023-31206
Apache InLong Exposure of Resource to Wrong Sphere vulnerability
Crítica
CVE-2023-31065
Apache InLong Insufficient Session Expiration vulnerability
Media
CVE-2023-28936
Apache OpenMeetings insufficient authorization vulnerability
Alta
CVE-2022-45048
Apache Ranger code execution vulnerability in policy expressions
Alta
CVE-2023-37260
league/oauth2-server key exposed in exception message when passing as a string and providing an invalid pass phrase
Media
CVE-2023-36828
Statamic's Antlers sanitizer cannot effectively sanitize malicious SVG
Baja
CVE-2023-41044
Graylog server has partial path traversal vulnerability in Support Bundle feature
Baja
CVE-2023-41045
Graylog vulnerable to insecure source port usage for DNS queries
Baja
CVE-2023-41041
Graylog user session is still usable after logout
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.