Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 6.828
Restablecer filtrosNull pointer dereference in `MatrixDiagPartOp`
Null pointer dereference and heap OOB read in operations restoring tensors
Null pointer dereference in `RaggedTensorToTensor`
Null pointer dereference in `CompressElement`
Division by 0 in inplace operations
Division by 0 in `ResourceGather`
Division by 0 in `ResourceScatterDiv`
Integer division by 0 in sparse reshaping
Floating point exception in `SparseDenseCwiseDiv`
JupyterLab: XSS due to lack of sanitization of the action attribute of an html <form>
Special Element Injection in notebook
Command injection in Yamale
The module `AccessControl` defines security policies for Python code used in restricted code within Zope applications. Restricted code is any code that resides in Zope's object database, such as the c
Zope is an open-source web application server. Zope versions prior to versions 4.6.3 and 5.3 have a remote code execution security issue. In order to be affected, one must use Python 3 for one's Zope
Storage corruption due to variables overwritten by re-entrancy locks
URL Redirection to Untrusted Site ('Open Redirect') in Products.isurlinportal
XML External Entity Reference in Glances
An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial of service (DOS) via crafted metadata.
netCDF in GDAL 2.4.2 through 3.0.4 has a stack-based buffer overflow in nc4_get_att (called from nc4_get_att_tc and nc_get_att_text) and in uffd_cleanup (called from netCDFDataset::~netCDFDataset and
Buffer Overflow in Pillow
Integer overflow in pywin32
Open Redirect in Flask-User
SQL Injection in Django
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.