Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 230
Filter zurücksetzenWasmtime is an open source runtime for WebAssembly. Under certain concurrent event orderings, a `wasmtime::Engine`'s internal type registry was susceptible to double-unregistration bugs due to a race
A vulnerability was found in MicroPython 1.22.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file py/objarray.c. The manipulation leads to use a
TensorFlow has segfault in array_ops.upper_bound
ConsoleMe has an Arbitrary File Read Vulnerability via Limited Git command
vyper performs double eval of the slice start/length args in certain cases
RPyC's missing security check results in code execution when using numpy.array on the server-side.
eth-abi is vulnerable to recursive DoS
Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. When using the built-in `extract32(b, start)`, if the `start` index provided has for side effect to update `b`, the byte a
Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. If an excessively large value is specified as the starting index for an array in `_abi_decode`, it can cause the read posi
Vyper negative array index bounds checks
Vyper's bounds check on built-in `slice()` function can be overflowed
Vyper's raw_call `value=` kwargs not disabled for static and delegate calls
concat built-in can corrupt memory in vyper
incorrect storage layout for contracts containing large arrays
aiohttp's ClientSession is vulnerable to CRLF injection via version
Ethereum ABI decoder DoS when parsing ZST
Werkzeug DoS: High resource usage when parsing multipart/form-data containing a large part with CR/LF character at the beginning
Piccolo's current `BaseUser.login` implementation is vulnerable to time based user enumeration
Vyper: reversed order of side effects for some operations
MindSpore vulnerable to memory corruption
Vyper vulnerable to OOB DynArray access when array is on both LHS and RHS of an assignment
Invalid char to bool conversion when printing a tensor
Segfault via invalid attributes in `pywrap_tfe_src.cc`
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.