Alta
CVE-2023-24580
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 6.856
Restablecer filtros
Alta
CVE-2023-25577
High resource usage when parsing multipart form data with many fields
Baja
CVE-2023-23934
Incorrect parsing of nameless cookies leads to __Host- cookies bypass
Alta
ghsa-344m-qcjq-xgrf
Vulnerable OpenSSL included in sgx-dcap-quote-verify-python
Crítica
CVE-2023-0777
Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4.
Baja
CVE-2023-24816
IPython vulnerable to command injection via set_term_title
Media
CVE-2022-47419
Mayan EDMS DMS XSS vulnerability
Media
CVE-2023-23931
Cipher.update_into can corrupt memory if passed an immutable python object as the outbuf
Media
CVE-2020-36660
A vulnerability was found in paxswill EVE Ship Replacement Program 0.12.11. It has been rated as problematic. This issue affects some unknown processing of the file src/evesrp/views/api.py of the comp
Alta
CVE-2022-45786
Apache AGE: Python and Golang drivers allow data manipulation and exposure due to SQL injection
Crítica
CVE-2019-25101
Header injection in TurboGears
Media
CVE-2023-23940
OpenZeppelin Contracts contains Improper Verification of Cryptographic Signature
Alta
CVE-2023-23969
In Django 3.2 before 3.2.17, 4.0 before 4.0.9, and 4.1 before 4.1.6, the parsed values of Accept-Language headers are cached in order to avoid repetitive parsing. This leads to a potential denial-of-s
Media
CVE-2023-0591
ubireader_extract_files is vulnerable to path traversal when run against specifically crafted UBIFS files, allowing the attacker to overwrite files outside of the extraction directory (provided the pr
Sin evaluar
CVE-2023-24829
Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component from 0.13.0 before 0.13.3. iotdb-web-workbench is an optional comp
Alta
CVE-2021-4315
A vulnerability has been found in NYUCCL psiTurk up to 3.2.0 and classified as critical. This vulnerability affects unknown code of the file psiturk/experiment.py. The manipulation of the argument mod
Media
CVE-2023-24622
isInList in the safeurl-python package before 1.2 for Python has an insufficiently restrictive regular expression for external domains, leading to SSRF.
Media
CVE-2022-47951
OpenStack Cinder, glance, and Nova vulnerable to Path Traversal
Media
CVE-2023-0470
Cross-site Scripting (XSS) - Stored in GitHub repository modoboa/modoboa prior to 2.0.4.
Media
CVE-2023-0519
Cross-site Scripting (XSS) - Stored in GitHub repository modoboa/modoboa prior to 2.0.4.
Alta
CVE-2022-25882
Versions of the package onnx before 1.13.0 are vulnerable to Directory Traversal as the external_data field of the tensor proto can have a path to the file which is outside the model current directory
Baja
CVE-2023-23611
LTI 1.3 Grade Pass Back Implementation has Missing Authorization Vulnerability
Sin evaluar
pysec-2023-1
Adyen has utility methods for validating notification HMAC signatures. The is_valid_hmac and is_valid_hmac_notification methods are vulnerable to a timing attack, you should compare the hash of the HM
Media
CVE-2023-0438
Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4.
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.