Mittel
CVE-2024-53526
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 4.359
Filter zurücksetzen
Mittel
CVE-2024-45805
OpenCTI is an open-source cyber threat intelligence platform. Before 6.3.0, general users can access information that can only be accessed by users with access privileges to admin and support informat
Hoch
CVE-2024-21543
Versions of the package djoser before 2.3.0 are vulnerable to Authentication Bypass when the authenticate() function fails. This is because the system falls back to querying the database directly, gra
Hoch
CVE-2024-45404
OpenCTI is an open-source cyber threat intelligence platform. In versions below 6.2.18, because the function to limit the rate of OTP does not exist, an attacker with valid credentials or a malicious
Hoch
pysec-2024-154
A number of releases of ultralytics contained malicious crypto miner software.
Kritisch
CVE-2024-53947
Apache Superset: Improper SQL authorisation, parse not checking for specific postgres functions
Mittel
CVE-2024-53948
Apache Superset: Error verbosity exposes metadata in analytics databases
Mittel
CVE-2024-53907
Django denial-of-service in django.utils.html.strip_tags()
Mittel
CVE-2024-37303
Synapse's unauthenticated writes to the media repository allow planting of problematic content
Hoch
CVE-2024-37302
Synapse denial of service through media disk space consumption
Hoch
CVE-2024-54000
MobSF vulnerability allows SSRF due to the allow_redirects=True parameter
Hoch
ghsa-486g-47cc-8wxf
aiocpa contains credential harvesting code
Nicht bewertet
pysec-2024-152
aiocpa 0.1.13 contains credential harvesting code
Hoch
CVE-2024-27134
Excessive directory permissions in MLflow leads to local privilege escalation when using spark_udf. This behavior can be exploited by a local attacker to gain elevated permissions by using a ToCToU at
Mittel
CVE-2024-53253
Sentry improper error handling leaks Application Integration Client Secret
Mittel
CVE-2024-53425
A heap-buffer-overflow vulnerability was discovered in the SkipSpacesAndLineEnd function in Assimp v5.4.3. This issue occurs when processing certain malformed MD5 model files, leading to an out-of-bou
Hoch
CVE-2024-52581
Litestar allows unbounded resource consumption (DoS vulnerability)
Kritisch
CVE-2024-47533
cobbler allows anyone to connect to cobbler XML-RPC server with known password and make changes
Mittel
CVE-2024-37155
OpenCTI May Bypass Introspection Restriction
Hoch
CVE-2024-45784
Apache Airflow: Sensitive configuration values are not masked in the logs by default
Hoch
CVE-2024-27530
wasm3 139076a contains a Use-After-Free in ForEachModule.
Mittel
CVE-2024-27529
wasm3 uncontrolled memory allocation vulnerability
Mittel
CVE-2024-51751
Gradio vulnerable to arbitrary file read with File and UploadButton components
Kritisch
CVE-2024-10081
codechecker vulnerable to authentication bypass when using specifically crafted URLs
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.