Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
ChakraCore information disclosure vulnerability
Improper Certificate Validation in MongoDB
Moodle Persistent Cross-site Scripting (XSS)
Kibana Sensitive Data Disclosure
While investigating a bug report on Apache Superset, it was determined that an authenticated user could craft requests via a number of templated text fields in the product that would allow arbitrary a
Keycloak code execution via UMA policy abuse
Magento stored cross-site scripting vulnerability in the customer address upload feature
Improper Certificate Validation in Apache Netbeans
Exposure of Resource to Wrong Sphere in Liferay Portal
Broken Authentication in Atlassian Connect Express
Mautic stored Cross-site Scripting (XSS)
NuGet Package Manager Tampering Vulnerability
AttesterSlashing number overflow
Code injection in `saved_model_cli` in TensorFlow
Incomplete validation in signal ops leads to crashes in TensorFlow
Core dump when loading TFLite models with quantization in TensorFlow
Segfault if `tf.histogram_fixed_width` is called with NaN values in TensorFlow
Heap buffer overflow due to incorrect hash function in TensorFlow
Type confusion leading to `CHECK`-failure based denial of service in TensorFlow
Segfault and OOB write due to incomplete validation in `EditDistance` in TensorFlow
Undefined behavior when users supply invalid resource handles
Missing validation results in undefined behavior in `SparseTensorDenseAdd
Segfault due to missing support for quantized types
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.