Crítica
CVE-2023-29374
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 6.856
Restablecer filtros
Alta
CVE-2023-28836
Wagtail vulnerable to stored Cross-site Scripting attack via ModelAdmin views
Media
CVE-2023-28837
Wagtail vulnerable to denial-of-service via memory exhaustion when uploading large files
Alta
CVE-2022-4899
zstd vulnerable to buffer overrun
Media
CVE-2022-23522
Arbitrary file write in mindsdb when Extracting Tarballs retrieved from a remote location
Crítica
CVE-2023-1712
Use of hard-coded, security-relevant constants in deepset-ai/haystack
Media
CVE-2023-25661
TensorFlow Denial of Service vulnerability
Media
CVE-2023-28858
redis-py before 4.5.3, as used in ChatGPT and other products, leaves a connection open after canceling an async Redis command at an inopportune time (in the case of a pipeline operation), and can send
Alta
CVE-2023-28859
redis-py through 4.5.3 leaves a connection open after canceling an async Redis command at an inopportune time (in the case of a non-pipeline operation), and can send response data to the client of an
Alta
ghsa-cpmr-mw4j-99r7
Nginx alias path traversal allows unauthenticated attackers to read all files on /label_studio/core/
Media
CVE-2023-1176
Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.2.2.
Crítica
CVE-2023-1177
Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1.
Alta
CVE-2023-25659
TensorFlow vulnerable to Out-of-Bounds Read in DynamicStitch
Alta
CVE-2023-25666
TensorFlow has Floating Point Exception in AudioSpectrogram
Media
CVE-2023-25667
TensorFlow vulnerable to segfault when opening multiframe gif
Crítica
CVE-2023-25668
TensorFlow has a heap out-of-buffer read vulnerability in the QuantizeAndDequantize operation
Alta
CVE-2023-25671
TensorFlow has segmentation fault in tfg-translate
Alta
CVE-2023-25672
TensorFlow has Null Pointer Error in LookupTableImportV2
Alta
CVE-2023-25674
TensorFlow has Null Pointer Error in RandomShuffle with XLA enable
Alta
CVE-2023-25801
TensorFlow has double free in Fractional(Max/Avg)Pool
Crítica
CVE-2018-25082
weixin-python XML External Entity vulnerability
Alta
CVE-2023-27586
CairoSVG improperly processes SVG files loaded from external resources
Media
CVE-2023-27494
Streamlit publishes previously-patched Cross-site Scripting vulnerability
Media
CVE-2023-25695
Generation of Error Message Containing Sensitive Information vulnerability in Apache Software Foundation Apache Airflow.This issue affects Apache Airflow: before 2.5.2.
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.