Alta
CVE-2022-22936
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 6.829
Restablecer filtros
Baja
CVE-2022-22935
An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. A minion authentication denial of service can cause a MiTM attacker to force a minion process to stop by impersonat
Alta
CVE-2022-24303
Path traversal in Pillow
Alta
CVE-2022-24757
The Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications. Prior to version 1.15.4, unauthorized actors can access sensitive information f
Alta
CVE-2022-25568
MotionEye v0.42.1 and below allows attackers to access sensitive information via a GET request to /config/list. To exploit this vulnerability, a regular user password must be unconfigured.
Alta
CVE-2022-0315
Use of insecure temporary file in Horovod
Crítica
CVE-2022-26184
Poetry before v1.1.9 contains Untrusted Search Path
Crítica
CVE-2022-24766
Insufficient Protection against HTTP Request Smuggling in mitmproxy
Alta
CVE-2022-24770
`gradio` is an open source framework for building interactive machine learning models and demos. Prior to version 2.8.11, `gradio` suffers from Improper Neutralization of Formula Elements in a CSV Fil
Alta
CVE-2022-24302
Race Condition in Paramiko
Alta
CVE-2022-24761
HTTP Request Smuggling in waitress
Media
CVE-2021-23556
Command injection in guake
Media
CVE-2022-0430
Exposure of Sensitive information in httpie
Alta
CVE-2022-21187
Command injection in libvcs and vcspull
Crítica
ghsa-32gv-6cf3-wcmq
HTTP/2 DoS Attacks: Ping, Reset, and Settings Floods
Baja
ghsa-4fx9-vc88-q2xc
Infinite loop in Pillow
Media
CVE-2022-0860
Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2.
Alta
CVE-2022-25508
Improper Authentication in FreeTAKServer
Alta
CVE-2022-25510
Hard coded credentials in FreeTAKServer
Alta
CVE-2022-26662
XML Entity Expansion in trytond and proteus
Media
CVE-2022-26661
Improper Restriction of XML External Entity Reference in trytond and proteus
Alta
CVE-2021-38296
Authentication Bypass by Capture-replay in Apache Spark
Crítica
CVE-2022-0766
Server-Side Request Forgery in calibreweb
Crítica
CVE-2022-0767
Server-Side Request Forgery in calibreweb
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.