Krytyczna
CVE-2022-35411
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 4 355
Wyczyść filtry
Wysoka
CVE-2022-35410
mat2 before 0.13.0 allows directory traversal during the ZIP archive cleaning process.
Średnia
CVE-2022-31124
Possible leak of key's raw field if declared length is incorrect
Średnia
ghsa-c58j-88f5-h53f
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in pycares
Wysoka
CVE-2022-30290
In OpenCTI through 5.2.4, a broken access control vulnerability has been identified in the profile endpoint. An attacker can abuse the identified vulnerability in order to arbitrarily change their reg
Krytyczna
CVE-2022-34265
Django `Trunc()` and `Extract()` database functions vulnerable to SQL Injection
Krytyczna
CVE-2022-31605
Unsafe yaml deserialization in NVFlare
Krytyczna
CVE-2022-31604
Unsafe deserialisation in the PKI implementation scheme of NVFlare
Wysoka
CVE-2022-31052
URL previews of unusual or maliciously-crafted pages can crash Synapse media repositories or Synapse monoliths
Wysoka
CVE-2022-26477
SystemDS CPU exhaustion vulnerability
Nieoceniona
CVE-2022-34061
The Catly-Translate package in PyPI v0.0.3 to v0.0.5 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency
Nieoceniona
CVE-2022-34054
The Perdido package in PyPI v0.0.1 to v0.0.2 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and d
Nieoceniona
CVE-2022-33004
The Beginner package in PyPI v0.0.2 to v0.0.4 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and
Nieoceniona
CVE-2022-33000
The ML-Scanner package in PyPI v0.1.0 to v0.1.5 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information an
Nieoceniona
CVE-2022-32998
The cryptoasset-data-downloader package in PyPI v1.0.0 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive us
Nieoceniona
CVE-2022-32997
The RootInteractive package in PyPI v0.0.5 to v0.0.19b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user inform
Nieoceniona
CVE-2022-32996
The django-navbar-client package of v0.9.50 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user informat
Wysoka
CVE-2022-22967
Salt's PAM auth fails to reject locked accounts
Wysoka
ghsa-85q9-7467-r53q
XSS Vulnerability in Markdown Editor
Średnia
ghsa-7rq4-qcpw-74gq
Formula Injection in Exported Data
Wysoka
ghsa-rm89-9g65-4ffr
Insufficient HTML Sanitization
Średnia
CVE-2022-29238
Jupyter Notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.12, authenticated requests to the notebook server with `ContentsManager.allow_hidden = False` only
Wysoka
CVE-2022-29241
Jupyter server Token bruteforcing
Wysoka
CVE-2022-2054
Command Injection in Nuitka
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.