Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
ImageMagick: Integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder
ImageMagick: MSL image stack index may fail to refresh, leading to leaked images
ImageMagick has a heap buffer over-read in its MAP image decoder
ImageMagick: Memory allocation with excessive without limits in the internal SVG decoder
ImageMagick has Use After Free in MSLStartElement in "coders/msl.c"
Image Magick has a Memory Leak in coders/ashlar.c
ImageMagick: Stack buffer overflow in FTXT reader via oversized integer field
ImageMagick's Security Policy Bypass through config/policy-secure.xml via "fd handler" leads to stdin/stdout access
ImageMagick: Policy bypass through path traversal allows reading restricted content despite secured policy
ImageMagick has Global Buffer Overflow (OOB Read) via Negative Pixel Index in UIL and XPM Writer
ImageMagick: Heap overflow in sun decoder on 32-bit systems may result in out of bounds write
ImageMagick has Division-by-Zero in YUV sampling factor validation, which leads to crash
ImageMagick has NULL Pointer Dereference in ClonePixelCacheRepository via crafted image
ImageMagick: Code Injection via PostScript header in ps coders
ImageMagick has memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths
ImageMagick has NULL pointer dereference in ReadSFWImage after DestroyImageInfo (sfw.c)
ImageMagick has heap-buffer-overflow via signed integer overflow in WriteUHDRImage when writing UHDR images with large dimensions
ImageMagick has memory leak in msl encoder
Apache Superset allows authenticated users to view sensitive data without explicit permissions
Apache Superset Improper Authorization allows low-privileged users to bypass access controls
Apache Superset: Read-Only Bypass via Improper Input Validation on PostgreSQL Connections
Apache Superset allows privileged users to conduct error-based SQL Injection
Apache Superset: Incomplete DISALLOWED_SQL_FUNCTIONS default list for ClickHouse engine
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.