Alta
CVE-2023-25156
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.445
Alta
CVE-2023-25692
Apache Airflow Google Provider Improper Input Validation vulnerability
Alta
CVE-2023-0509
Improper Certificate Validation in pyload-ng
Alta
CVE-2022-4885
sviehb/jefferson vulnerable to path traversal
Media
CVE-2022-4730
Graphite Web Cross-site Scripting vulnerability
Media
CVE-2022-4729
Graphite Web Cross-site Scripting vulnerability
Media
CVE-2023-0227
Pyload Insufficient Session Expiration vulnerability
Media
CVE-2023-0055
Pyload contains Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
Media
CVE-2023-0057
pyLoad vulnerable to Improper Restriction of Rendered UI Layers or Frames
Media
CVE-2023-22298
pgAdmin 4 Open Redirect vulnerability
Media
CVE-2019-25091
nsupdate.info has Sensitive Cookie Without 'HttpOnly' Flag
Alta
CVE-2022-38060
OpenStack Kolla sudo privilege escalation vulnerability
Media
CVE-2022-4728
Graphite Web Cross-site Scripting vulnerability
Media
CVE-2022-4396
pyRdfa3 Cross-site Scripting vulnerability
Media
CVE-2022-4589
Terms and Conditions Module vulnerable to Open Redirect
Media
CVE-2021-4287
binwalk vulnerable to UNIX Symbolic Link (Symlink) Following
Alta
CVE-2022-4223
pgadmin4 vulnerable to Code Injection
Media
CVE-2022-4105
Cross-site Scripting in kiwitcms
Media
CVE-2022-42965
snowflake-connector-python is vulnerable to Regular Expression Denial of Service (ReDoS)
Alta
CVE-2022-33684
Apache Pulsar Disabled Certificate Validation for OAuth Client Credential Requests makes C++/Python Clients vulnerable to MITM attack
Alta
CVE-2022-41547
MobSF allows attackers to read arbitrary files via a crafted HTTP request
Alta
CVE-2022-39254
When matrix-nio receives forwarded room keys, the receiver doesn't check if it requested the key from the forwarder
Media
CVE-2022-3102
jwcrypto token substitution can lead to authentication bypass
Media
CVE-2022-3355
Inventree vulnerable to Stored Cross-site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.