Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 6.829
Restablecer filtrosOpen Redirect in archivy
Code Injection in GitHub repository pytorchlightning/pytorch-lightning prior to 1.6.0.
Twisted SSH client and server deny of service during SSH handshake.
Ansible discloses sensitive information in traceback error message
Incorrect Authorization and Exposure of Sensitive Information to an Unauthorized Actor in scrapy
Scrapy cookie-setting is not restricted based on the public suffix list
Cross-site Scripting in Weblate
OS Command injection in Apache Airflow
Apache Airflow Cross-site Scripting Vulnerability
B2 Command Line Tool is the official command line tool for the backblaze cloud storage service. Linux and Mac releases of the B2 command-line tool version 3.2.0 and below contain a key disclosure vuln
b2-sdk-python TOCTOU application key disclosure
Insecure Temporary File in mlflow
Incorrect Default Permissions in Cobbler
Command Injection in Cobbler
Server crash if running Python 3.10 w/ Sanic 20.12
A flaw was found in Mercurial before 4.9. It was possible to use symlinks and subrepositories to defeat Mercurial's path-checking logic and write files outside a repository.
In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to require authentication (spark.authenticate) via a shared secret. When enabled, however, a specially-craft
`CHECK`-failures in binary ops in Tensorflow
`CHECK`-failures in `TensorByteSize` in Tensorflow
`CHECK`-failures during Grappler's `SafeToRemoveIdentity` in Tensorflow
Memory leak in Tensorflow
Integer overflow in Tensorflow
Integer overflow in Tensorflow
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.