Alta
CVE-2024-28184
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.445
Alta
CVE-2024-27292
Docassemble unauthorized access through URL manipulation
Alta
CVE-2024-25723
ZenML Server Remote Privilege Escalation Vulnerability
Media
CVE-2024-27083
Flask-AppBuilder's OAuth login page subject to Cross Site Scripting (XSS)
Media
CVE-2024-25169
Mezzanine allows attackers to bypass access control mechanisms
Media
CVE-2024-25170
Mezzanine allows attackers to bypass access controls via manipulating the Host header
Media
CVE-2024-27290
Docassemble HTML and javascript injection
Media
CVE-2024-27291
Docassemble open redirect
Media
CVE-2024-24808
pyLoad open redirect vulnerability due to improper validation of the is_safe_url function
Alta
CVE-2024-3572
Scrapy decompression bomb vulnerability
Alta
CVE-2024-3574
Scrapy authorization header leakage on cross-domain redirect
Alta
CVE-2024-26151
Potentially untrusted input is rendered as HTML in final output
Media
CVE-2024-1729
Gradio apps vulnerable to timing attacks to guess password
Alta
CVE-2023-50782
Python Cryptography package vulnerable to Bleichenbacher timing oracle attack
Alta
CVE-2024-24590
Allegro AI ClearML vulnerable to deserialization of untrusted data
Alta
CVE-2024-24591
Allegro AI ClearML path traversal vulnerability
Media
CVE-2024-24595
Allegro AI ClearML Stores Credentials in Plaintext in MongoDB Instance
Alta
CVE-2024-1314
Kinto Attachment's attachments can be replaced on read-only records
Media
CVE-2024-0727
Null pointer dereference in PKCS12 parsing
Media
CVE-2023-50781
m2crypto Bleichenbacher timing attack - incomplete fix for CVE-2020-25657
Media
CVE-2024-1141
glance-store logs s3 access keys
Media
CVE-2024-0960
ai-flow Deserialization of Untrusted Data vulnerability
Media
CVE-2024-22420
JupyterLab vulnerable to SXSS in Markdown Preview
Alta
CVE-2024-22421
JupyterLab vulnerable to potential authentication and CSRF tokens leak
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.