Baja
ghsa-5cpq-8wj7-hf2v
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 6.856
Restablecer filtros
Media
CVE-2023-29159
Starlette has Path Traversal vulnerability in StaticFiles
Media
CVE-2023-2970
MindSpore vulnerable to memory corruption
Baja
CVE-2023-33185
Incorrect signature verification in django-ses
Media
CVE-2023-32681
Unintended leak of Proxy-Authorization header in requests
Media
CVE-2023-32323
Synapse Outgoing federation to specific hosts can be disabled by sending malicious invites
Alta
CVE-2022-39374
Synapse Denial of service due to incorrect application of event authorization rules during state resolution
Alta
CVE-2022-39335
Synapse does not apply enough checks to servers requesting auth events of events in a room
Media
CVE-2023-28370
Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user acce
Crítica
CVE-2023-33175
toui allows user-specific variables to be shared between users
Media
CVE-2023-32675
Vyper's nonpayable default functions are sometimes payable
Media
CVE-2023-2800
Insecure Temporary File in GitHub repository huggingface/transformers prior to 4.30.0.
Crítica
CVE-2023-2780
Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.3.1.
Alta
CVE-2023-32303
Planet's secret file is created with excessive permissions
Alta
CVE-2023-32059
Vyper vulnerable to incorrect ordering of arguments for kwargs passed to internal calls
Alta
CVE-2023-32058
Vyper vulnerable to integer overflow in loop
Alta
CVE-2023-31146
Vyper vulnerable to OOB DynArray access when array is on both LHS and RHS of an assignment
Media
ghsa-jjgp-whrp-gq8m
in-toto: PGP trust model not (fully) considered
Alta
CVE-2023-30172
A directory traversal vulnerability in the /get-artifact API method of the mlflow platform up to v2.0.1 allows attackers to read arbitrary files on the server via the path parameter.
Media
CVE-2023-32076
in-toto vulnerable to Configuration Read From Local Directory
Alta
CVE-2023-31143
Mage-ai missing user authentication
Alta
CVE-2023-30837
vyper vulnerable to storage allocator overflow
Crítica
CVE-2023-25754
Privilege Context Switching Error vulnerability in Apache Software Foundation Apache Airflow.This issue affects Apache Airflow: before 2.6.0.
Media
CVE-2023-29247
Task instance details page in the UI is vulnerable to a stored XSS.This issue affects Apache Airflow: before 2.6.0.
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.