Alta
CVE-2024-29905
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.358
Restablecer filtros
Alta
CVE-2024-28233
Cross site scripting (XSS) in JupyterHub via Self-XSS leveraged by Cookie Tossing
Media
CVE-2024-29888
Saleor: Customers' addresses leak when using Warehouse as a `Pickup: Local stock only` delivery method
Baja
CVE-2024-29199
Unauthenticated views may expose information to anonymous users
Media
CVE-2024-1455
LangChain's XMLOutputParser vulnerable to XML Entity Expansion
Alta
CVE-2024-29019
ESPHome vulnerable to Authentication bypass via Cross site request forgery
Media
CVE-2024-29156
Information leakage in YAQL
Media
CVE-2024-29032
`qiskit_ibm_runtime.RuntimeDecoder` can execute arbitrary code
Media
CVE-2024-24770
vantage6 vulnerable to a username timing attack on recover password/MFA token
Alta
CVE-2023-41334
RCE in TranformGraph().to_dot_graph function
Alta
CVE-2024-29033
GoogleOAuthenticator.hosted_domain incorrectly verifies membership of an Google organization/workspace
Media
CVE-2024-52288
LibOSDP RMAC revert to the beginning of the session
Media
CVE-2024-27287
esphome vulnerable to stored Cross-site Scripting in edit configuration file API
Alta
CVE-2024-27081
ESPHome vulnerable to remote code execution via arbitrary file write
Alta
CVE-2024-27292
Docassemble unauthorized access through URL manipulation
Media
CVE-2024-27290
Docassemble HTML and javascript injection
Media
CVE-2024-27291
Docassemble open redirect
Media
CVE-2024-24808
pyLoad open redirect vulnerability due to improper validation of the is_safe_url function
Alta
CVE-2024-3572
Scrapy decompression bomb vulnerability
Alta
CVE-2024-3574
Scrapy authorization header leakage on cross-domain redirect
Alta
CVE-2024-26151
Potentially untrusted input is rendered as HTML in final output
Media
CVE-2024-1729
Gradio apps vulnerable to timing attacks to guess password
Alta
CVE-2024-24590
Allegro AI ClearML vulnerable to deserialization of untrusted data
Alta
CVE-2024-24591
Allegro AI ClearML path traversal vulnerability
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.